3 ms·
Thumbnail preview is a _massive_ attack surface. All those RCEs in JPEGs, MP4s, PDFs etc are now potentially immediately executed upon displaying the file. No t
by ohgodplsno 5y ago
Thumbnail preview is a _massive_ attack surface. All those RCEs in JPEGs, MP4s, PDFs etc are now potentially immediately executed upon displaying the file. No thanks.
- hughrr 5y agoYou’re going to want to look at those pictures if you have them or do you just collect file names?
- wishigotitfree 5y agoSee, the nice thing about Linux is that you can always disable what you don't like. You're never just helplessly subject to the whims of the developers.
- TkTech 5y agoSo turn it off if it worries you. Keep in mind thumbnail rendering is sandboxed[0]. It's Linux, the reason I like it is that it doesn't try to prevent you from doing whatever you want. [0] https://gitlab.gnome.org/GNOME/gnome-desktop/-/blob/master/README.md#thumbnailing-sandboxing https://gitlab.gnome.org/GNOME/gnome-desktop/-/blob/master/R...
- grumpyprole 5y agoLol. Although, at least for open source, by the time a hacker has an exploit prepared, someone will have rewritten the code.
- ubercow13 5y agoWhat do you do between opening the file manager and opening the image/video itself that verifies it doesn’t have any RCE exploits that other people aren’t doing?