Hacker News Reader

Please be cautious about recommending KDE's Dolphin. According to Hanno Böck in https://media.ccc.de/v/SHA2017-148-improving_security_with_f..., KDE are refusing to sandbox the thumbnail/preview code, which has proven to be riddled with easy-to-find bugs (using software fuzzing)

View on HN

how do we know there aren't similar bugs with MS explorer / Finder ?

Well, we don't, but would you rather use software known to have bugs or software not known to have bugs?

uh... software whose bugs are known and whose source is accessible of course ? it's not like finder does not have CVEs: https://www.cvedetails.com/vulnerability-list/vendor_id-49/p....

Reply on news.ycombinator.com