Re: Security: Be careful with StarDict!
On 2025-08-06 07:29:13 -0400, Dan Ritter wrote:
> I also note that the Description for stardict does not mention
> that it is primarily a client for remote servers. Compare the
> Description for "dict":
>
> Description: dictionary client
> This package provides a client application to query a dictd server.
> The client-server protocol is TCP-based; the server may then be local or
> accessed through the network.
> .
> The DICT Development Group maintains several public servers which can
> be accessed from any machine connected to the Internet. The default
> configuration is to query one of these servers first. This may be
> changed in the configuration file /etc/dictd/dict.conf.
> .
>
>
> That's an informative description.
Yes, and also in the dict(1) man page. And another very important
difference is that to do a dict query, the user needs to do this
explicitly. On the opposite, stardict scans selections from other
applications and do the associated query without asking the user
first.
--
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)
Reply to: