Live data from Hacker News

StarDict sends X11 clipboard to remote servers

lwn.net

191–200 of 350 posts

Re: StarDict sends X11 clipboard to remote servers

#192
post #103

Earlier quoted context omitted.

Such a response is not considered a valid defence under GDPR. You cannot sign away your right to privacy any more than you can sign away your right to life.

> You cannot sign away your right to privacy any more than you can sign away your right to life You can literally do both in the EU with informed consent.

No, you can't.

Informed consent is (1) always going to be specific and (2) ends when the legal base for procession is no longer supported.

Re: StarDict sends X11 clipboard to remote servers

#193

Earlier quoted context omitted.

> You cannot sign away your right to privacy any more than you can sign away your right to life You can literally do both in the EU with informed consent.

No, you can't. Informed consent is (1) always going to be specific and (2) ends when the legal base for procession is no longer supported.

Struggling to see the relevance of both constraints when it comes to assisted death.

Re: StarDict sends X11 clipboard to remote servers

#194

Somewhat related, I was quite surprised when I discovered that my Samsung phone was sharing ALL my clipboard with all my other Samsung devices, including passwords copied into the clipboard, and even preserving the history. I can't remember if the sharing was enabled by default or I opted in by accident. I assume it also goes through their servers to reach my other devices. I could disable the sharing, but still can'…

[flagged]

> You're just an impatient paranoid, easily jumping to conclusions. You should be ashamed for spreading false information.

Thank you for your kind words, please look at the HN comment guidelines when you have a chance. Your point would have been an excellent correction if shared thoughtfully, but it's all negated by the name calling and personal attacks.

Re: StarDict sends X11 clipboard to remote servers

#195
post #147

Earlier quoted context omitted.

[flagged]

There are probably a non-zero amount of people who are older than 20 who have not read the hitchhikers guide, or don't recall some parts of it. For example, me

Same here! Last time I read the books is about 17 years ago, and definitely didn’t remember that.

Re: StarDict sends X11 clipboard to remote servers

#196

While I have a lot of respect for the effort that goes into Debian, I always disliked this kind of "maximalism" from the package manager. Oh, the user wants "foo"? Let's install every software that might be even remotely useful somehow in combination with foo! Oh there is a network daemon in there? Fantastic, let's start it immediately! I know that there is a flag to disable the installation for "recommended" package…

Actually the default value of `APT::Install-Recommends` had been false, and it was changed to true in Debian 6.0 Squeeze (2011-02-06). I didn't like the change at the time because my Debian and Ubuntu systems suddenly installed more packages by default. However, now that I think of, the distinction of recommended packages and suggested packages was blurry before the change, because both were opt-in. Auto-installing recommended packages, while allowing the user to opt out is a better default I guess. But I still turn off auto-installation of recommended packages in the systems I manage.

Re: StarDict sends X11 clipboard to remote servers

#197

Earlier quoted context omitted.

Such responses to me are proof of malicious intent.

Hanlon's razor applies here, I think. It's just ignorance, not malice. I doubt the maintainer has connection, or was pressured by these two random dictionary websites to include this - nor do I think that they gain any advantage of it. People need to be on the lookout though, the xz incident showed that FOSS is indeed vulnerable.

Sufficiently advanced ignorance is indistinguishable from malice.

(but malware authors usually cover their tracks better)

Re: StarDict sends X11 clipboard to remote servers

#198

> of course a dictionary program will include code to talk to dictionary-providing web sites. I wouldn't say that is just a given, if I've apt-get installed a dictionary I might expect that is the whole thing on my machine. It's not like we haven't had dictionaries in physical books for centuries... It seems like stardict is very much an online thing, which I suppose could be legit, but the whole thing does seem like…

Dumb question... Could you do a per-word bloom filter to do online spell checking without actually disclosing the words you're checking?

[deleted]

Re: StarDict sends X11 clipboard to remote servers

#199

Earlier quoted context omitted.

a bloom filter look up is by hash, and given the relatively small set of words in english, it would be pretty easy for the server to reverse the hash sent to it. Thus a bloom filter wouldn't be very private. Additionally, a typical spell checker feature is to provide alternative, correct, spellings, rather than just telling you whether a word is correctly spelled. I bet there's some cool way to do this with zero-know…

There’s also a way simpler way: send a hash prefix to server, get a list of matches. Google Safe Browsing does this with URLs, for example.

haveibeenpwned.com does this for passwords too. I doubt you could make it work for all the smaller words though, let alone offer corrections.

Re: StarDict sends X11 clipboard to remote servers

#200

> In response, Xiao pointed out that the package description can be read by any user who chooses to install the software, and it does mention the scan feature. Wouldn't be the first (or last) time a Debian maintainer has pulled the "you should read the descriptions of all (hundreds) of your packages (most installed as dependencies)" card in response to a bug report. If someone started reading all the package descript…

Also, someone looked at the package and the description, that is why this issue has been raised.
Post reply on HN