this post was submitted on 26 Mar 2025
213 points (95.3% liked)

Linux

62471 readers
463 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS
 

I just found this out recently. So this isn't actually Nautilus itself but it's the file previewer (Gnome Sushi) that comes with it. If you select a file and press the spacebar, it will automatically preview the file if it supported. If the file is an audio file, it will automatically fetch album art from the web, and if the file is an HTML file, it can make third-party requests. IMHO this is a huge privacy issue. For example if you were browsing the web using Tor Browser and saved a page to view offline, and then later accidentally opened it using the file previewer, any third-party requests will leak out the clearnet.

This is an open issue and I don't expect it to be fixed anytime soon, so the easiest solution is to simply uninstall Gnome Sushi (on Fedora, it is the sushi package). On atomic distros if Gnome Sushi is installed as a flatpak you might be able to revoke internet permissions for it using Flatseal, though I have not tested this.

Edit: I'm aware that KDE also has file previewers, but I'm not sure if they have the same issue. If anybody else knows please leave a comment letting us know

all 32 comments
sorted by: hot top controversial new old
[–] fuckwit_mcbumcrumble@lemmy.dbzer0.com 51 points 10 months ago (3 children)

While good for privacy, this sounds like an awful UX change for the average person. Some sort of nice toggle to disable it would be good, but removing it all together would probably annoy more people than it benefits.

[–] Rogue@feddit.uk 37 points 10 months ago

It could be implemented the same as most email clients do. A simple message "load external content" with an option to always load.

[–] TunaLobster@lemmy.world 32 points 10 months ago (1 children)

Woah there! This is GNOME. You don't get choices.

[–] reddit_sux@lemmy.world 4 points 10 months ago

Maybe we will get an extension

[–] Xanza@lemm.ee 18 points 10 months ago

A setting that pulls information from the clear net should be up to the user and not a default setting, IMO.

[–] Ferk@lemmy.ml 21 points 10 months ago (4 children)

Thunar is a much better alternative, in my opinion.

[–] brax@sh.itjust.works 13 points 10 months ago (1 children)

Agreed. I fucking hate Nautilus - especially the way it fucking tries to filter everything instead of jumping me to where I'm typing. It makes navigation so much slower

[–] ReakDuck@lemmy.ml 2 points 10 months ago

I hate, when programs like Firefox or anything else uses something like Nautilus to pick the file.

I can't even press ctrl+L to change the URL of my filesystem where I want to be. I need a lot of clicky GUI to get to the desination...

[–] Bogus007@lemm.ee 1 points 10 months ago* (last edited 10 months ago)

Pcmanfm? Nemo? However, if one does not need a GUI I would suggest ranger, nnn or alike.

[–] nodiratime@lemmy.world 1 points 10 months ago

When in doubt, avoid anything gnome.

[–] cmgvd3lw@discuss.tchncs.de 11 points 10 months ago (2 children)

Well its also a simple browser so it will preview the HTML page like any other browser would. But I don't know about audio files though.

[–] Zagorath@aussie.zone 20 points 10 months ago

IMO a "simple browser" of this sort should display literally only the content in the HTML file itself. It shouldn't even view CSS stored in a separate local CSS file, let alone reach out to the web to download more content.

[–] hendrika_gelya@toast.ooo 10 points 10 months ago

Yes but an HTML file is very different from a website. At the very least I'd like an option to disable all remote requests, or disable previews for certain file formats.

[–] tasankovasara@sopuli.xyz 8 points 10 months ago

Thanks for tipping the previewer's name. Not concerned with the (valid) sec aspect personally, but I've accidentally hit space a couple of times since meta+shift+space is Sway's default for floating / tiling a window and I don't use the preview anyway. Let's uninstall.

[–] hperrin@lemmy.ca 4 points 10 months ago

It probably downloads remote images in PDFs too, but I don’t know that for sure.

[–] grrgyle@slrpnk.net 4 points 10 months ago

OpenSnitch, do your thing!

[–] ReakDuck@lemmy.ml 3 points 10 months ago

People say Qt sucks. But there is literally no better alternative to the KDE environment. Either Dolphin or tons of other apps just have more features and settings compared to GTK ones.

Unsure if they have the same issue

[–] golden_zealot@lemmy.ml 3 points 10 months ago

I went and checked out Thunar because of this post, and regardless of the original intention, I have found a file manager I much prefer as a result. Thank you.

Use the image viewer used by TAILS

[–] darklamer@lemmy.dbzer0.com 2 points 10 months ago (1 children)

Thanks for the tip! Despite never actually using sushi, I had it installed so now I've uninstalled it to avoid using it by accident.

[–] Lemmchen@feddit.org 1 points 10 months ago* (last edited 10 months ago)

Does KDE's Dolphin suffer from this, too?

[–] swelter_spark@reddthat.com 1 points 10 months ago

Good to know, even though I'm not a Gnome user. I wonder if it will work with torsocks.