Flatpak: A security nightmare – two years later

Re:Flatpak: A security nightmare – two years later by sergeykish on Friday October 02, 2020 @09:56AM (#24662621)

> Developers are responsible for releasing updates, not flatpak.

That's what distribution maintainers do.

> They are not trying to be more secure than manually installing packages on your system.

That's downgrade from distribution experience.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by eikenberry on Friday October 02, 2020 @03:57PM (#24666456)

The primary reason I have when considering using a flatpak or appimage is for software either not commonly included in distros (eg. proprietary software like games) or that are updated more often than the distro cares to manage (eg. browsers). It fills the gaps in distros.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by sergeykish on Saturday October 03, 2020 @05:08AM (#24670673)

You do not have to abandon distribution model. I've just installed Nix on Arch Linux [1]. It ships all required dependencies - glibc etc - version specific. Works on Ubuntu/Debian [2].

[1] https://wiki.archlinux.org/index.php/Nix

[2] https://ariya.io/2020/05/nix-package-manager-on-ubuntu-or-de...

[ Parent | on HN ]