News for hackers. Stuff that matters.

A comment on Microsoft support page says Windows 10 “retirement date” is 2025. Parent comment

Re:Microsoft support page says Windows 10 “retirement date” ... by ohgodplsno on Friday June 11, 2021 @01:55PM (#27476472)
Thumbnail preview is a _massive_ attack surface. All those RCEs in JPEGs, MP4s, PDFs etc are now potentially immediately executed upon displaying the file. No thanks.
[ Parent | on HN ]
Re:Microsoft support page says Windows 10 “retirement date” ... by hughrr on Friday June 11, 2021 @01:57PM (#27476505)
You’re going to want to look at those pictures if you have them or do you just collect file names?
[ Parent | on HN ]
Re:Microsoft support page says Windows 10 “retirement date” ... by TkTech on Friday June 11, 2021 @02:01PM (#27476560)
So turn it off if it worries you. Keep in mind thumbnail rendering is sandboxed[0]. It's Linux, the reason I like it is that it doesn't try to prevent you from doing whatever you want.

[0] https://gitlab.gnome.org/GNOME/gnome-desktop/-/blob/master/R...

[ Parent | on HN ]
Re:Microsoft support page says Windows 10 “retirement date” ... by grumpyprole on Friday June 11, 2021 @02:04PM (#27476597)
Lol. Although, at least for open source, by the time a hacker has an exploit prepared, someone will have rewritten the code.
[ Parent | on HN ]
Re:Microsoft support page says Windows 10 “retirement date” ... by ubercow13 on Saturday June 12, 2021 @06:14AM (#27483298)
What do you do between opening the file manager and opening the image/video itself that verifies it doesn’t have any RCE exploits that other people aren’t doing?
[ Parent | on HN ]
Re:Microsoft support page says Windows 10 “retirement date” ... by wishigotitfree on Friday June 11, 2021 @02:01PM (#27476551)
See, the nice thing about Linux is that you can always disable what you don't like. You're never just helplessly subject to the whims of the developers.
[ Parent | on HN ]