The upcoming Debian 13 sends text you select to chinese servers

>With some plugins, StarDict sends the user's X11 selection from
other applications to some servers: dict.youdao.com and dict.cn
(both Chinese servers).

>This happens *by default* under Debian testing (future Debian 13)
at least, without any warning. These plugins are installed and
enabled automatically when the user installs stardict / stardict-gtk
(stardict-gtk has a Recommends on stardict-plugin), which is just
advertised as being an international dictionary lookup program.
But this would still be an issue if the user had installed the
stardict-plugin package explicitly (which contains many plugins),
as such a feature is uncommon and unexpected.

>Note also that this is transmitted via HTTP only, thus not encrypted
on the network. So someone closer to the user might also be able to
see the data.

>Here, this is even worse, because this occurs on the user's selection
(the X11 PRIMARY selection?), i.e. the user does not even have to
copy the selection to the clipboard.

https://www.openwall.com/lists/oss-security/2025/08/04/1

>>106142293 (OP)
Why would they fuck up this bad? Was the money that good? Holy shit.

>>106142293 (OP)
>This happens *by default* under Debian testing
Extremely misleading claim. It only happens when
>the user installs stardict / stardict-gtk [...] an international dictionary lookup program
which is a package maintained by someone named "xiao sheng wen".

That package should probably be removed due to its insecure behaviour but this does not describe default behaviour of the system and says little to nothing about Debian as a distro.

>>106142293 (OP)
Never use anything that is named after a divorced couple.

>>106142293 (OP)
cool story, but i cant take anyone whom types like that (a nigger faggot) seriously.

better than sending it to the nsa

>>106142549
"Named" vs claims to be named. Know the difference.

>Not using fedora in 2025
Deserved.

>>106143516
Fedora is even worse. Absolute trash distro.

yeah its way too soon for a new version too. bookworm feels like it came out like 2 weeks ago. why the fuck do we need a new version already? What the fuck does trixie even do that bookworm doesn't? Autistic fucking retard troons

Debian is garbage. Their spins are bloated garbage.

For anything older that is not capable of running cinnamon use tiny core linux.

>>106142293 (OP)
>The upcoming Debian 13 sends text you select to chinese servers
>This happens *by default*
>...when the user installs Chinese package stardict
lol it's a nothingburger

>>106142293 (OP)
the current state of foss

>>106142293 (OP)
bump

Xsissies, explain yourselves.

mxlinux will fix this just like how they fixed systemd being "required" for debian