I guess you don't use any laptops than.
> I'd rather sacrifice some security and keep my freedom. We're already losing the war against general-purpose computing.
That's a false dichotomy. As a user you can give all the permissions you want to a sandboxed app you want to use. The only one losing freedom is the potential malware writer.
If you are true to this sentiment, I guess you run everything under the root/admin account of the computer, because that gives you maximum freedom, right? A non-root user is a sandboxed user.
Seems really inconvenient to have to physical unplug things when you're not using them. And in laptops and other integrated devices you can't unplug them.
This is why Purism makes laptops and phones with kill switches: https://puri.sm/security/
Huge files (made worse by an insistence on keeping two versions of everything around). Slow to start even a simple calculator. Fills the mount list with spam. All to deliver the "feature" that Discord can't share a file from ~/.minecraft/screenshots/whatever.png and ffmpeg can't access /dev/video0
Users prefer dpkg so clearly that Canonical had to make a fake dpkg file for Chromium that installs it using snap.
Were you previously running the distro supplied Spotify or from Spotify's own APT repo?
- When there is new security fix, like new version of Node.js, I release new version of Wekan https://wekan.github.io and all those about 9000 servers worldwide are updated automatically soon and safe from that vulnerability. Wekan migrations upgrade database schema etc automatically.
- When Snap is upgraded, it upgrades very fast, compared to Docker
- Snap does not have layers taking big amount of disk space, like Docker
- Snap sandbox works very well. Snaps with strict confinement (like Wekan) can not access files outside of /var/snap/wekan/common directory.
- Snaps are the reason to select Snap compatible distro https://snapcraft.io/docs/installing-snapd .
Is there any other automatic update system like Snap? AFAIK other update systems require manual steps to update.
The problem is once you give an app perission then you never know when it's turning on the mic or the camera.
The microphone and camera are unplugged when not in use.
"secure"? No thanks, I'd rather sacrifice some security and keep my freedom. We're already losing the war against general-purpose computing.