It’s not just Windows tracking your web browsing history. GPU drivers do it too. Source: https://www.neowin.net/news/intel-windows-driver-to-now-collect-user-telemetry-data-like-website-categories-by-default/

Maybe for initial testers and feedback, look for a community that would be super supportive. Like LocalLLaMa and Hacker News

Got it. Access to docker.sock is definitely something to be wary of, or CAP_ADMIN, or access to certain host devices.

Worth mentioning though that Jellyfin usually has none of these.

That is fairly cool, I didn’t know queries were local. Looks like I was worried over nothing

With that setup, an attacker could mount the host filesystem to the container and would own the host from that container.

Can you elaborate more on this? Assuming an attacker is in the Jellyfin container with full remote code execution, how could they mount the host filesystem?

Then buy from GOG. The gaming industry is not a monopoly. Vote with your wallet.

What I’m saying is that if you type “cat videos” in the search bar, it will immediately search the KDE Discover app store for relevant results, by default. It’s not searching the entire web but it’s still sending a request to the internet, one that can be tracked and shared (for example if you have Flathub enabled in KDE Discover, and Flathub happens to use Google analytics on their servers, then Google would know about everything you type in the search bar)

Linux does this too. GNOME and KDE both do web searches from the search menu by default (to be more precise they search the app store, which is on the web)