Flatpak – a security nightmare – 2 years later (2020)

Re:Flatpak – a security nightmare – 2 years later (2020) by kabdib on Sunday March 21, 2021 @12:55PM (#26531818)

I dislike sandboxes that

- have complicated permissions that users misunderstand or can be tricked into misconfiguring through inattention, misleading user interface or fatigue

- aren't actually sandboxes because the isolation they claim isn't actually achieved (I usually call these "security holes")

- are used to artificially force markets (e.g., Microsoft's UWP)

Other than that, they're great.

Signed, cranky, pre-morning-coffee programmer speaking ex cathedra from the 1970s

[ Parent | on HN ]

Re:Flatpak – a security nightmare – 2 years later (2020) by higerordermap on Monday March 22, 2021 @01:31AM (#26537139)

I think this is a valid criticism from flatpak / snap. But they are step in right direction about sandboxing (on the other hand bloat and developer trust are main problems abou these platforms for me).

[ Parent | on HN ]