A KDE Dev finds a flaw in Calibre's mount system
A KDE developer discovered a serious security flaw in the way Calibre mounts eBook readers and tablets. The resulting bug list discussion was surprising, to say the least.
http://blog.zx2c4.com/702
I have to say, even though the mount system was removed, I can't say I have much confidence in Calibre's developer right now.
http://blog.zx2c4.com/702
I have to say, even though the mount system was removed, I can't say I have much confidence in Calibre's developer right now.
no subject
no subject
One would think he would be more concerned with making an excellent product, rather than refusing to listen to genuine bug reports.
no subject
I'll continue to use it until there is another product out there to replace it or until someone creates a fork and makes it better. I refuse to give him money though when normally I would.
no subject
Exactly this.
no subject
The whole point of calibreās library management features is that they provide a search and sort based interface for locating books that is much more efficient than any possible directory scheme you could come up with for your collection. [emphasis added]
No "in my opinion", no "I believe", nothing. So he believes that there is no person alive who could come up with a better scheme. What does he think we all are, stupid?
no subject
Yes.
Also, I really hate how Calibre organizes its library. It is not how I would do it at all.
no subject
no subject
no subject
no subject
These are all cross-platform, by the way.
no subject
The advantage of calibre is the multiple files conversion (and stripping DRM through use of plugins). That is the one thing I can't give up on, since the time I can set aside for editing and converting my fics is extremely limited. I will check Sanza Desktop, thank you for the link, and if it can do that, I'll be very happy using it.
no subject
no subject
no subject
Seriously? In what library system in the entire world are things organized by an author's first name?
no subject
So let those who seem to have an intuitive grasp on this program continue using it with joy, and we'll find some other way of handling our files.
no subject
no subject
Now, though, I'm looking at Stanza and Bookpedia for the Mac. My poor Linux box is mostly dead, so I don't have to worry about that platform. I just can't believe the Goyer berates Jason Donenfeld, then Goyer cries when the Donenfeld says he won't stick around and help. Why would he? It already sounded like a toxic work atmosphere.
no subject
*it must be said I've not tried installing any of the latest updates because of this problem, so it may have been fixed.
no subject
no subject
no subject
I do get the bit about the response from Calibre's developer, which is... not what you'd expect it to be when someone reports a bug, but the rest of it could just as well have been written in Klingon for me.
no subject
So basically it allows someone or something to bypass the safety net you have by not allowing user accounts to have root privileges.
no subject
no subject
no subject
no subject
(Anonymous) 2011-12-18 01:56 am (UTC)(link)For someone preparing fairly straightforward books, Calibre and its advice pages very carefully take you round all the hassles with graphics and the TOC, and even though it doesn't undertake to be an ideal 'first input' processor, only a handler, it's still brill for creation. OK, you might not like its handling flavour or in one case its security, but it's the best thing that's hit ebook production that I've seen.
As for eCub, this comment..
http://www.mobileread.com/forums/archive/index.php/t-47559.html
...mirrors my thoughts exactly, except I'd have expressed them more harshly. I'd never consider anything from that stable now. After my experience with the truly pathetic eCub, I was praying that something like Calibre would turn up, and amazingly it did.
no subject
*squints*
Nope. Still can't figure out what this comment has to do with my answering
no subject
1. the author thinks that since this issue is limited to Linux it's not a problem as far as they are concerned, and
2. they seem to think that the problem is that users don't like it's security, but that shouldn't matter because it's the best thing for ebook production in years.
Point one, I'm far from an expert, and I've only ever used Windows, but I'm hearing about Linux as a replacement for Windows more and more and not just in academic circles where I work, but as home use systems. Paired with the fact that calibre is the most popular ebook management and conversion system, that means home users might come across this problem.
Point two, as far as I'm concerned, it doesn't matter whether a program is pure gold in its design, implementation, whatever of everything else, if it exposes my computer to security issues, I would remove it without having a second thought about possibly losing the rest of its functionality. There's nothing that's as important to me as online security, and if I have to manually convert the enormous amounts of fic I've collected over the years, then by God I'll do it.
And I have to add this:
it would be really nice of you if you would sign your post if you don't have a Dreamwidth account and you're not willing to comment with an OpenID account. I've never been shy of expressing my opinions (favorable or not) under my own username, either here or at MobileRead, and will continue to do so.
Plus, if you've familiarized yourself with calibre and its help pages, you would know that the author of the program spells its name in lowercase.