[krita] [Bug 379730] New: Krita is leaking username into exported .png files

[Kjartan F . Kvamme]

https://bugs.kde.org/show_bug.cgi?id=379730

            Bug ID: 379730
           Summary: Krita is leaking username into exported .png files
           Product: krita
           Version: 3.1.3
          Platform: MS Windows
                OS: MS Windows
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
          Assignee: krita-bugs-n...@kde.org
          Reporter: forb...@gmail.com
  Target Milestone: ---

When opening some .png files in a program called TweakPNG to view the chunk
data for unrelated reasons, I discovered that Krita is secretly leaking my name
(presumably from the Windows user account) into the exported files in the form
of a zTXt chunk.

Digging around in the Krita preferences and menus, I found that it's possible
to change "Active Author Profile" to Anonymous, however that only seems to
affect newly created documents. Opening an existing .kra file and exporting a
.png from it will still include the username even with Anonymous author profile
selected.

This is in my opinion a very bad default setting, as it is effectively secretly
leaking personally identifiable information into every file exported without
the user ever being made aware of it.

It should probably default to the Anonymous author profile, or at least require
the user to explicitly enter and confirm the name in the Default Author
Profile.

-- 
You are receiving this mail because:
You are watching all bug changes.