News for hackers. Stuff that matters.
Re:Ubuntu 20.04 LTS (Focal Fossa) by GordonS on Thursday April 23, 2020 @12:27PM (#22957707)
I don't know much about the Snap system - regarding 3rd parties and the "tick", is this using domain verification, or some other means? Do 3rd parties have to pay for this?

I read something the other day about needing to pay Canonical $15k/y for a branded Snap store, but I'm not sure if that was about private stores, this, or something else.

Re:Ubuntu 20.04 LTS (Focal Fossa) by jamieweb on Thursday April 23, 2020 @01:11PM (#22958252)
Another point is that when installing Snap packages from the command-line, the verification tick only appears after the install has finished, by which point it is already too late.

You can view package info prior to installing, but if we're talking about a typosquatting issue here, that doesn't really help.

Re:Ubuntu 20.04 LTS (Focal Fossa) by kd913 on Thursday April 23, 2020 @03:53PM (#22960403)
I think the main mechanism of this is communication directly with developers on forum.snapcraft. In this case Mozilla with Canonical etc...

I didn't go through this process so I don't really know.

I think that is how it has worked so far for all of the 1st party snaps I have seen.