A KDE Dev finds a flaw in Calibre's mount system

[baggyeyes]

A KDE developer discovered a serious security flaw in the way Calibre mounts eBook readers and tablets. The resulting bug list discussion was surprising, to say the least.

http://blog.zx2c4.com/702

I have to say, even though the mount system was removed, I can't say I have much confidence in Calibre's developer right now.

Comments

[baggyeyes]

I have to say it is his complete lack of concern regarding security that has me concerned. Now I have to look for an ebook manager to replace it. :(

One would think he would be more concerned with making an excellent product, rather than refusing to listen to genuine bug reports.

[jumpuphigh]

I just finished reading more about it. I'm not surprised at his lack of concern. He has always tended towards being dismissive towards users and other devs with a solid handful of "if you don't like it, build your own" thrown into every conversation.

I'll continue to use it until there is another product out there to replace it or until someone creates a fork and makes it better. I refuse to give him money though when normally I would.

[kaiz]

I'll continue to use it until there is another product out there to replace it or until someone creates a fork and makes it better. I refuse to give him money though when normally I would.

Exactly this.