Malware Found in the Ubuntu Snap Store

Re:Malware Found in the Ubuntu Snap Store by beojan on Sunday May 13, 2018 @03:33AM (#17057765)

If the application is trustworthy, it doesn't matter. If not, you should think twice about running it even in a container.

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by cookiecaper on Tuesday May 15, 2018 @01:30PM (#17075762)

To be clear, I agree. Containers on Linux are very weak security boundaries and should not be considered safe sandboxes for untrusted or dangerous code. In fact, post-Spectre, only physically independent hardware unattached to the network should be considered a reasonably safe sandbox.

However, something is better than nothing, and it's just not true that there's no difference between running something from the AUR and running something in a "confined" snap. There is some crap in the way at least.

[ Parent | on HN ]

Re:Malware Found in the Ubuntu Snap Store by beojan on Monday May 28, 2018 @08:28AM (#17172064)

Good point. Though the fact that you read your PKGBUILDs before running them (you do read your PKGBUILDs, right?) at least compensates for this.

[ Parent | on HN ]