-
A lot of software uses
systemd-journaldto log errors, -
The bash shell saves everything you type into the terminal,
-
wtmp, btmp, utmp all track exactly who is logged in and when,
-
The package manager logs all software you install and keeps the logs after uninstallation,
-
And the kernel writes part of the RAM which may contain sensitive information to the disk when your PC crashes.
While the OS isn’t sending these logs to Microsoft or Google, anyone who gets into your PC while you are logged in and your data is unencrypted can see much of what you have been doing.
If you want to be private, you must disable them.
They’ve been spamming this a few times now, fully respect your decision, but I know I commented on this exact post about 2 weeks ago the same as everyone else here, just FYI if you didn’t know they’ve been repeating it. (Maybe it was an alt acct, not sure, but I know I said the same thing before)
Appreciate the feedback.
I’ve seen it one other time. If you see it again, feel free to report it. It definitely helps get visibility of it.