News for hackers. Stuff that matters.
Re:Flatpak – a security nightmare by segmondy on Tuesday October 09, 2018 @08:19PM (#18180932)
I'll just make a file link to .bashrc and call it /tmp/foo.png, what are you going to do? Not open links? Check if the file links to .bashrc?

If an image manipulation software wants to open .bashrc, allow it. If it has permission to write to one, so be it. If .bashrc is such a security nightmare, then perhaps the issue is that programs can write to it. Remove the write permission. Perhaps a security model where restoring permission asks for password.

Re:Flatpak – a security nightmare by int_19h on Wednesday October 10, 2018 @09:29PM (#18190400)
> Check if the file links to .bashrc?

That would seem to be the obvious right choice. What's the problem with it?