Live data from Hacker News

StarDict sends X11 clipboard to remote servers

lwn.net

251–260 of 350 posts

Re: StarDict sends X11 clipboard to remote servers

#251
post #232

Earlier quoted context omitted.

There are probably a non-zero amount of people who are older than 20 who have not read the hitchhikers guide, or don't recall some parts of it. For example, me

Or watch the movie

Which came out in 2005, 20 years ago.

Re: StarDict sends X11 clipboard to remote servers

#252
post #106

> In response, Xiao pointed out that the package description can be read by any user who chooses to install the software, and it does mention the scan feature. Wouldn't be the first (or last) time a Debian maintainer has pulled the "you should read the descriptions of all (hundreds) of your packages (most installed as dependencies)" card in response to a bug report. If someone started reading all the package descript…

I do agree with your point, specially when it is not the first time a package maintained by that guy does non-expected behavior like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010165 (Inappropriate package, modifies other package's (conf) files, should be removed from archive).

I disagree that "modifying other packages' conf files" is a problem. Conf files in general are there for the user to modify, and as the maintainer points out, it shouldn't matter if the user uses vi, joe, emacs or this specific tool to modify them.

The problem in this case is that the package modifies generated files belonging to another package. Making it about conffiles is bad phrasing by the bug submitter.

Re: StarDict sends X11 clipboard to remote servers

#253
post #14

Meanwhile on Android: - The clipboard can not be read by backgrounded applications - Apps by default are unable to use HTTP

Meanwhile on Wayland: > StarDict on Wayland doesn't have this problem, because Wayland prevents applications from being able to capture text from other applications by default.

As far as I know Wayland does not protect you from Chinese malware being distributed by Debian maintainers.

Re: StarDict sends X11 clipboard to remote servers

#254

Earlier quoted context omitted.

I don't expect average user to read an entire dependency tree. However, apt and aptitude does a relatively good job of explaining their actions' reasons. Let me rephrase: 1. Installation of recommended packages is a good default for the average user, because it provides functionality they expect. 2. If the user is not happy with what's happening, changing defaults are not hard. IOW, if you don't like how your system…

Why does "caring what a package does" mean that someone is no longer a beginner? All the people I know care what their software does.

From my experience, newbie users are generally more interested in the end result: Their intended packages are working, and what that package is doing. They are not yet interested in all the libraries required and whatnot.

As they get familiar with their systems, they get interested in what makes the particular package or software tick. Then, the digging starts. At that point they are already pretty proficient with their package managers, and start to learn their systems inside out. At that point they're not beginners since they can do targeted tinkering.

Except very rare circumstances, I didn't see anyone to dive to the deep end directly.

Re: StarDict sends X11 clipboard to remote servers

#255
post #28
post #16

Earlier quoted context omitted.

> It's like coming across a key someone dropped on the road. You don't even know what it's for. There's a lot of keys that are self-identifying, even real keys. My key has "Apartment Name, Apartment Number" engraved into the head, and searching the apartment name on google brings it up in the first 5 results. Let's say you find the following plaintext on the network: "sk-xxx....". Do you know what it's for? What if i…

> My key has "Apartment Name, Apartment Number" engraved into the head Hotels learned not to do such silly things several decades ago. I'm surprised that your building management lacks such obvious wisdom.

It's been a real lifesaver, whenever a guest loses the guest key it just ends up back in my mailbox eventually.

Also, like 80% of the hotels I've stayed at in the last year have the hotel name on the keycard, though admittedly they usually don't include the room number.

The remaining 20% had physical keys with keychain fobs that had the room number and often hotel name (typically japanese ryokans do this)

Re: StarDict sends X11 clipboard to remote servers

#256

Earlier quoted context omitted.

Why does "caring what a package does" mean that someone is no longer a beginner? All the people I know care what their software does.

From my experience, newbie users are generally more interested in the end result: Their intended packages are working, and what that package is doing. They are not yet interested in all the libraries required and whatnot. As they get familiar with their systems, they get interested in what makes the particular package or software tick. Then, the digging starts. At that point they are already pretty proficient with th…

I guess sou just have a weird definition of "what a software does" means. Because to it is exactly about the end product.

Re: StarDict sends X11 clipboard to remote servers

#259

Earlier quoted context omitted.

Same here! Last time I read the books is about 17 years ago, and definitely didn’t remember that.

For me it’s been about 25, but since this is the opening premise, and a throwback to the opening scene I think it’s probably one of the most memorable.

Ha, you might have better memory than me. From the opening of the books - I remember more vividly Arthur meeting Ford Prefect and his house being demolished. And vaguely something about a pub?

So I think I remember the gist of the first chapter, but not the actual quotes :)

Re: StarDict sends X11 clipboard to remote servers

#260
post #139

Earlier quoted context omitted.

I's a generational thing. I would guess that someone who expects applications to phone home, on the off chance that they are actually otherwise local, is likely someone pretty young who hasn't lived in a world of locally installed software that doesn't talk to anything. If we search for the author's bio, that seems to check out. They are a well-credentialed CS person; obviously they know that dictionary programs such…

For many languages, there simply isn't a comprehensive dictionary file that could be redistributed legally as part of a free-software offline dictionary application. You either settle for a few thousand words put together by a handful of volunteers, or you redistribute a commercial dictionary illegally, or you have to connect to an online service to provide sufficient coverage legally.

[deleted]
Post reply on HN