> I mean, competently implemented background indexing shouldn't be a security risk or a performance issue. Except ofcourse in the 100% theoretical, never ever

> I mean, competently implemented background indexing shouldn't be a security risk or a performance issue. Except ofcourse in the 100% theoretical, never ever seen in the wild, case of bugs in file-format parsers. It's not like Linux's "file" or "strings"-utility[1] has had a local exploits in the past or anything. Uhm... So yeah... About that.... Back in the real world, this is a very real attack vector. Especially when it runs in the background on a large batch of files, automatically and unasked for. Note: I'm not saying I'm against indexing content for easier access and help locating files. I'm just saying that you can't simply dismiss it as a security-risk because it runs in the background. [1] http://lcamtuf.blogspot.no/2014/10/psa-dont-run-strings-on-untrusted-files.html http://lcamtuf.blogspot.no/2014/10/psa-dont-run-strings-on-u...