Did you know that GNOME Calculator makes automatic connections to third party websites such as the IMF to fetch currency exchange data?
I don't know how common these kind of connections are in Linux DEs, and I have no idea since I couldn't find anything online (not even about what I just wrote about GNOME Calculator), but I consider them highly problematic.
Apart from the Subgraph OS application firewall, are there any usable tools to manage these connections?
>>58138954
Kek. Always hated GNOME software anyway.
>>58138954
What? Prove it.
>>58138954
>>58139051
The good thing about open source, you can always check the code.
Can't post link due to shitty spam filter here. but code is on Github
for example: lib/currency[DOT]vala#L380
also:
>does connections to several sites/services
>parses stuff with xpath -> data unreliable
tr;dr: gnome-calculator bad software, don't use
https://github.com/GNOME/gnome-calculator/blob/master/lib/currency.vala
It literally evals() what it fetches over HTTP. What the fuck?
>>58139112
>GNOME
It's all about the software being as fancy as fuck
Linux = botnet confirmed
If you're a tinfoil hat, just use Openbox
>>58139183
Being concerned over your desktop environment automatically parsing untrusted third party data in almost 2017 is now being paranoid?
shit b8 6/10
Of course, it fetches over HTTP retard, how else is it supposed to get the currency rates.
>>58139211
Kinda. It's done for convenience
>>58139234
Over HTTPS and providing the option to disable it, maybe?
>>58139247
Agreed. Make an issue/feature request. Shouldn't be too hard to implement.
>>58139247
Currency rates aren't sensitive data
>>58139282
HTTPS prevents tampering.
>>58139282
I dont think the issue here is
>THE IMF IS SPYING ON ME WHEN MY CALCULATOR FETCHES EXCHANGE RATES
nigger.
Worrying about that kind of spying is the right thing to do, but thats not what this is or what people are saying it is
>fetching currency exchange rates from reputable source is spyware
For fuck's sake, just don't use that feature if you don't want to. Check exchange rates manually with your preferred source and punch in those numbers instead, you nigger.