{"id":140045,"date":"2025-08-04T23:11:56","date_gmt":"2025-08-04T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/paket-stardict-v-debian-otpravlyaet-vydelennyj-tekst-na-vneshnie-servery"},"modified":"2025-08-04T23:11:56","modified_gmt":"2025-08-04T21:11:56","slug":"paket-stardict-v-debian-otpravlyaet-vydelennyj-tekst-na-vneshnie-servery","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/paket-stardict-v-debian-otpravlyaet-vydelennyj-tekst-na-vneshnie-servery","title":{"rendered":"Il pacchetto StarDict in Debian invia il testo selezionato a server esterni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nel pacchetto StarDict proposto nel repository Debian Testing (futura release Debian 13), che implementa un'interfaccia per la ricerca nei dizionari, \u00e8 stata individuata un problema di riservatezza: nella configurazione predefinita, l'applicazione invia automaticamente il testo selezionato (x11 PRIMARY selection) che viene copiato negli appunti a server esterni. \u00c8 sufficiente evidenziare un brano di testo in qualsiasi applicazione e questo viene immediatamente inviato senza crittografia tramite il protocollo HTTP ai server cinesi dei dizionari online dict.youdao.com e dict.cn. Il problema si verifica solo quando si lavora in ambienti basati su protocollo X11; utilizzando Wayland viene applicata di default l'isolamento degli appunti. <\/p>\n

Il pacchetto di supporto StarDict in Debian ha risposto che questo comportamento \u00e8 considerato normale. Per impostazione predefinita, in StarDict \u00e8 attivata la modalit\u00e0 di ricerca automatica nei dizionari per il testo selezionato e sono attivati dizionari sia locali che esterni. I server dict.youdao.com e dict.cn forniscono dizionari inglese-cinese, collegabili tramite plugin, attivati di default durante l'installazione del pacchetto stardict-plugin, che \u00e8 una dipendenza raccomandata per il pacchetto stardict-gtk. Gli utenti che non gradiscono questo comportamento sono consigliati di disattivare i dizionari di rete o la funzione di ricerca automatica durante la selezione nelle impostazioni. <\/p>\n

Un utente che ha notato il problema ha obiettato che questo comportamento non dovrebbe mai attivarsi di default, poich\u00e9 porta a una fuga di informazioni. L'utente pu\u00f2 selezionare testo contenente informazioni riservate, come password e dati personali. In questo caso, le informazioni non solo possono rimanere potenzialmente nei log su server<\/a> dict.youdao.com e dict.cn e sono visibili ai loro amministratori, ma diventano anche accessibili per l'intercettazione del traffico a causa dell'uso di HTTP invece di HTTPS. 911565 write(16, \u00abGET HTTP:\/\/dict.youdao.com\/fsearch?q=Testo selezionato HTTP\/1.0\r\nUser-Agent: Mozilla\/4.0(compatibile;MSIE 5.00;Windows 98)\r\nAccept: *\/*\r\nHost: dict.youdao.com\r\nConnection: close\r\n\r\n\u00bb, 171) = 171 911565 write(17, \u00abGET HTTP:\/\/dict.cn\/ws.php?utf8=true&q=Testo selezionato HTTP\/1.0\r\nUser-Agent: Mozilla\/4.0(compatibile;MSIE 5.00;Windows 98)\r\nAccept: *\/*\r\nHost: dict.cn\r\nConnection: close\r\n\r\n\u00bb, 164) = 164 <\/p>\n

\u00c8 interessante notare che nel 2009 un comportamento analogo in StarDict \u00e8 stato riconosciuto come una vulnerabilit\u00e0 (CVE-2009-2260) e l'accesso ai dizionari di rete \u00e8 stato disabilitato per impostazione predefinita. Ora questa funzionalit\u00e0 \u00e8 stata nuovamente ripristinata.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Debian Testing (\u0431\u0443\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u043b\u0438\u0437 Debian 13) \u043f\u0430\u043a\u0435\u0442\u0435 StarDict, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u0441\u043b\u043e\u0432\u0430\u0440\u044f\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e — \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u043c\u044b\u0439 \u0432 \u0431\u0443\u0444\u0435\u0440 \u043e\u0431\u043c\u0435\u043d\u0430 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0442\u0435\u043a\u0441\u0442 (x11 PRIMARY selection) \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0442\u0440\u044b\u0432\u043e\u043a \u0442\u0435\u043a\u0441\u0442\u0430 \u0438 \u043e\u043d \u0441\u0440\u0430\u0437\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-140045","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Il pacchetto StarDict su Debian invia il testo selezionato a server esterni | ProHoster","description":"Nel pacchetto StarDict offerto nel repository Debian Testing (futura versione Debian 13), che implementa un'interfaccia per la ricerca nei dizionari, \u00e8 stata riscontrata una problematica riguardante la riservatezza: nell'impostazione predefinita dell'applicazione.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/paket-stardict-v-debian-otpravlyaet-vydelennyj-tekst-na-vneshnie-servery","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0430\u043a\u0435\u0442 StarDict \u0432 Debian \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0442\u0435\u043a\u0441\u0442 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b | ProHoster","og:description":"\u0412 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Debian Testing (\u0431\u0443\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u043b\u0438\u0437 Debian 13) \u043f\u0430\u043a\u0435\u0442\u0435 StarDict, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u0441\u043b\u043e\u0432\u0430\u0440\u044f\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e - \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/paket-stardict-v-debian-otpravlyaet-vydelennyj-tekst-na-vneshnie-servery","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-08-04T21:11:56+00:00","article:modified_time":"2025-08-04T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"140045","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 14:09:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 14:09:19","updated":"2026-01-23 14:09:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/140045","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=140045"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/140045\/revisions"}],"predecessor-version":[{"id":164459,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/140045\/revisions\/164459"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=140045"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=140045"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=140045"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}