News for hackers. Stuff that matters.
Re:Coordinated Disclosure: 1-Click RCE on Gnome (CVE-2023-43... by formerly_proven on Wednesday October 11, 2023 @06:48AM (#37842910)
Software like this is always going to be a massive security liability. It doesn't really matter if it's Windows Indexing Services (which has a plugin infrastructure for supporting arbitrary file formats, which is used by well-known secure software like Adobe Reader, other Office programs and also supports a variety of multimedia formats), Gnome's tracker-miner or KDE's Baloo indexer.
Re:Coordinated Disclosure: 1-Click RCE on Gnome (CVE-2023-43... by naranha on Wednesday October 11, 2023 @07:40AM (#37843251)
I guess it's fine as long as it isn't running in untrusted durectories. I'd take downloads out and documents in by default.