Flatpak: A security nightmare – two years later

Re:Flatpak: A security nightmare – two years later by swiley on Friday October 02, 2020 @08:43AM (#24661986)

I'm absolutely not suggesting you rely on a third party. It's very easy and preferable to pass around source code, and it's (by design) very easy to build GNU/Linux apps from the source.

Distributing binaries will absolutely bring about calls to lock computing down to 3rd party distributors because the kind of people that can't handle typing `./configure` are the same kind that will pull random maleware off of google.

No good can come from installing closed software anyway.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by AnIdiotOnTheNet on Friday October 02, 2020 @08:51AM (#24662048)

> I'm absolutely not suggesting you rely on a third party. It's very easy and preferable to pass around source code, and it's (by design) very easy to build GNU/Linux apps from the source.

Yeah, it is so easy that no one ever uses containers to ensure a consistent and working build environment for software!

Oh wait, yes they do.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by swiley on Friday October 02, 2020 @08:54AM (#24662071)

If your application is that complex then yes you probably should be working with it in a container.

There are decades of very good desktop applications that are simple and easy to build. Flatpack will just encourage things like slack.

[ Parent | on HN ]