[Tech] Opera JPEG vulnerability

[juergen urner]

Marco A. Calamari schrieb:
> On Wed, 2008-02-27 at 18:51 +0000, Matthew Toseland wrote:
>   
>> This is interesting because it came at the end of a thread on Frost where the 
>> OP was arguing that Freenet shouldn't filter JPEGs. (Freenet strips out EXIF 
>> data and other unknown chunks from JPEGs on download to maximize security; in 
>> the future we will do something similar on inserts).
>>     
>
> IMHO changing in any way information inserted in Freenet *must*
>  be documented, evident in user interface, up by default
>  but easily user selectable.
>
>   

Is it really up to Freenet fixing issues in software people may use
along with it? Sounds like opening a can of worms with scarce
devel time at hand. If it is a problem related to fproxy, let fproxy
deal with it. Or tell users not to use Opera.

As I see it, Freenet has a tendency of mixing node and client
stuff a bit too much.


My 2 cents, Juergen