A society that balances cause and effect! Money is also balanced! Money flows perfectly through multiple lifetimes! Being respected ultimately leads to balance!
What?
StarDict sends X11 clipboard to remote servers
321–330 of 350 posts
Re: StarDict sends X11 clipboard to remote servers
#322Earlier quoted context omitted.
Sure. We've had dictionary software for decades. This whole trend of adding a service to stuff that doesn't need a service is very annoying.
In that language…
You can absolutely have an offline DB for lookups/translation for any language that has a server-hosted option available.
Re: StarDict sends X11 clipboard to remote servers
#323Earlier quoted context omitted.
Can the problem be fixed without making the software useless?
use TLS enabled dictionary service. if there is none, you dont want this feature. at all. make sure they click through something or explicitly enable is even hard as you cannot assume a user understands the impact. they might not understand what it means to send their data over plaintext, or what someone can do with it.
I don't want this feature with TLS either. Sometimes I copy passwords from my password manager to paste into the intended app. I don't want everything that enters my clipboard sent to a third party.
Re: StarDict sends X11 clipboard to remote servers
#324The Wayland framing at the end strikes me as misleading. This gets it exactly right: > Or maybe StarDict would have started asking for special permissions to let it work on Wayland, and users would have accepted those defaults the same way they currently do. Yes, that’s what it would do. Its installer might even configure that special permission automatically, without user intervention. Malware’s gonna mal. Wayland m…
It's extra misleading, because "Wayland" isn't a thing when it comes to policy like this. Unless a compositor implements some sort of user approve/deny UI when an app requests access to the clipboard, apps on Wayland can snoop on the clipboard just as easily as on X11. I haven't run GNOME or KDE in Wayland mode, so maybe they do implement something like that, but none of the wlroots-based compositors I've tried do.
Re: StarDict sends X11 clipboard to remote servers
#325Earlier quoted context omitted.
Again, false dichotomy. If Debian's maintainers don't put things in the package manager with dodgy behavior, that's not a walled garden like iOS Not having to check your cereal for razor blades is also a freedom
You're asking Debian to check out all aspects of a program and hold them liable if it does something you don't like, or their volunteers does something you don't like. That's not what Debian is doing. Debian is asking for volunteers to package the world's free software, also written by volunteers. They have their own checklists, your "dodgy behaviour" concerns aren't on it. Confirming the software meets your expectat…
They did. The article exists. The package manager behavior was changed accordingly. It doesn't automatically include that plug-in. My understanding was you scoffed at the "paternalism" and said part of the fun is that there might be terrible behaviors. Others disagree.
Re: StarDict sends X11 clipboard to remote servers
#326Earlier quoted context omitted.
I don't think Debian intentionally shields you from privacy-invading software. Other distros may differ on this point. Debian does not mandate anything about privacy in its Policy Manual (which are the standards for selecting and packaging software that maintainers must adhere to): https://www.debian.org/doc/debian-policy/search.html?q=priva... There's also no insistence on privacy in the Debian Social Contract or DF…
> I don't think Debian intentionally shields you from privacy-invading software. Don't they change the Firefox defaults for more privacy?
They do indeed, probably other packages have patches too.
Re: StarDict sends X11 clipboard to remote servers
#327There are numerous privacy issues in distros, some known, most probably unknown, some examples from Debian: https://wiki.debian.org/PrivacyIssues Luckily there are things like opensnitch that can block some of these issues: https://github.com/evilsocket/opensnitch
Your link is about privacy issues in upstream software that Debian hasn't sufficiently worked around yet . The main advantage of the Distro model (as opposed to developer-maintained package ecosystems) is exactly that there is someone protecting you from questionable software "features".
Agreed, but it is definitely not enough, which is why some Debian folks packaged opensnitch.
Re: StarDict sends X11 clipboard to remote servers
#328Earlier quoted context omitted.
Your link is about privacy issues in upstream software that Debian hasn't sufficiently worked around yet . The main advantage of the Distro model (as opposed to developer-maintained package ecosystems) is exactly that there is someone protecting you from questionable software "features".
I don't think Debian intentionally shields you from privacy-invading software. Other distros may differ on this point. Debian does not mandate anything about privacy in its Policy Manual (which are the standards for selecting and packaging software that maintainers must adhere to): https://www.debian.org/doc/debian-policy/search.html?q=priva... There's also no insistence on privacy in the Debian Social Contract or DF…
> I don't think Debian intentionally shields you from privacy-invading software
There is a culture of valuing privacy though, including patching out privacy issues. Especially since a lot of Debian folks are from Europe, with corresponding GDPR knowledge.
I know that the lintian warnings pointing out privacy issues in HTML documentation do get a lot of patches.
Also, opensnitch is packaged as a mitigation.
You are right about the policy problem, Debian really needs to do something about that.
There is at least a privacy policy for Debian services.
Re: StarDict sends X11 clipboard to remote servers
#329Somewhat related, I was quite surprised when I discovered that my Samsung phone was sharing ALL my clipboard with all my other Samsung devices, including passwords copied into the clipboard, and even preserving the history. I can't remember if the sharing was enabled by default or I opted in by accident. I assume it also goes through their servers to reach my other devices. I could disable the sharing, but still can'…
I noticed this happening through KDE connect, where passwords copied on Linux show up in Android's clipboard history, is there a way to block passwords from being transported around like that without completely disabling clipboard sharing altogether?
KDE connect lets you disable/configure individual plugins, just disable the "Clipboard sync". I don't think it can by itself figure out that you're copying a password, at least across UI toolkits. FWIW most toolkits and browsers don't actually copy from a password input anyway.
Re: StarDict sends X11 clipboard to remote servers
#330Earlier quoted context omitted.
Such responses to me are proof of malicious intent.
Why can't reasonable people disagree here? Surely if the utility of some features might outweigh the security concerns for some people. Making features opt-in instead of opt-out significantly changes their discoverability and usage metrics. On the whole, a translation system that has a feature to translate selected text seems hardly surprising. Similarly, using an online service to improve translation quality and red…
> Think something along the lines of "StarDict wants to connect to dict.cn. Allow/Deny?".
That is what opensnitch provides, as do some other detection tools.