News for hackers. Stuff that matters.

A comment on Until further notice, think twice before using Google to download software.

Re:Until further notice, think twice before using Google to ... by arthurofcharn on Friday February 03, 2023 @10:11AM (#34642037)
Google was once considered trustworthy. It never was, but we thought it trustworthy. Where can you find a trustworthy source for software? Depends on your platform. Linux: Your package manager. In my case, apt. Mac: Apple has an app store of its own. Use that, or one of the BSD package management systems ported over. Ios: Apple app store is decently curated. Android: Google's app store is terribly curated. Give up now. Windows: Nobody uses whatever app store or package management system that microsoft developed. A third party developed a useful package management system. It is called Steam. Other platforms: see replies below.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by yjftsjthsd-h on Friday February 03, 2023 @10:28AM (#34642296)
> Android: Google's app store is terribly curated. Give up now.

Google's store might be a lost cause, but ironically the fact that the platform isn't a walled garden can be used to our advantage here: Use F-droid.

[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by charcircuit on Friday February 03, 2023 @10:24AM (#34642245)
Linux package managers are not trustworthy. That is another case where everyone pretends that it is. Usually packages are created and updated by random people and can be pseudonymous.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by arthurofcharn on Friday February 03, 2023 @10:53AM (#34642723)
Oh crud, you are right. Any idea how to fix this? Perhaps a more curated (and more manageable) list? That would seem to be in conflict with our bazaar model.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by izacus on Friday February 03, 2023 @11:48AM (#34643668)
The package managers right now ARE that curated list and distributions like Debian have proven themselves to be trustworthy.

Of course, you can always find something wrong with every approach, but the truth that everyone needs to face here is that you need to trust SOMEONE to distribute good software to you.

[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by Sakos on Friday February 03, 2023 @01:59PM (#34646179)
AUR is one of those "at your own risk" repos where I always check the pkgbuild and comments of a package first before installing something new. I don't know why I should hesitate to trust the default repos though since they're curated by the same people making the distro I use. Either I trust them or I use another distro.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by aquova on Friday February 03, 2023 @01:39PM (#34645846)
Yes, but these are the same people who are managing every single program on your system. At some point you either have to compile every single item from source yourself, or accept the fact that you will need to place a certain level of trust into the vetting system your distribution has established.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by doodlesdev on Friday February 03, 2023 @05:08PM (#34648430)
That really depends on the repos you are using, that's why distros are so important. If using repos from Debian, Ubuntu or Fedora (including RPM Fusion) you are 1000x safer than anyone using winget or google to try and download software from random sources.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by justinclift on Friday February 03, 2023 @11:03AM (#34642906)
On windows, Chocolatey (chocolatey.org) also seems to have a decent reputation.

As does PortableApps (portableapps.com).

[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by izacus on Friday February 03, 2023 @11:47AM (#34643640)
scoop is IMO a bit better on Windows (mostly because it focuses on portable software), but Chocolatey is a good fallback.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by angelbar on Friday February 03, 2023 @11:12AM (#34643053)
For windows you could start with Chocolatey and check filehippo
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by amcoy37 on Friday February 03, 2023 @11:47AM (#34643641)
Also consider the now built-in package manager: Winget
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by flenserboy on Friday February 03, 2023 @11:38AM (#34643500)
And governments are doing their best to break the app stores, destroying even the basic safely mechanisms such stores can offer. This should be taken as instructive, but is ignored by most.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by izacus on Friday February 03, 2023 @11:46AM (#34643631)
What a strange argument - with this they're actually opening the market to stores that will ensure secure products like F-Droid with their guarantee for opensource. If anything, the current situation where BOTH Apple and Google store are ridden with malware and poor software doesn't work.

We didn't fix SourceForge problems by allowing a megacorp to kill all competition and enshrine that cesspool, but by creating new sources of software.

[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by scarface74 on Friday February 03, 2023 @09:35PM (#34650793)
There is very little outright, break the sandbox malware available for iOS.
[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by pixl97 on Friday February 03, 2023 @12:40PM (#34644733)
Apple does not have to break the safety mechanisms in their store...

They just have to allow other stores.

[ Parent | on HN ]
Re:Until further notice, think twice before using Google to ... by sdiq on Friday February 03, 2023 @12:47PM (#34644883)
Winget is a new thing in Windows one could use though sometimes it has issues.
[ Parent | on HN ]