News for hackers. Stuff that matters.
Re:KDE and GNOME seeks $100k to turn Flathub into a Store fo... by serf on Thursday February 23, 2023 @07:46PM (#34919095)
>How many different versions of OpenSSL are running on my laptop right now? Who can say?

but that's a problem, too.

i'd rather all things on a system be bottleneck-forced into using the latest version of security libraries that my system is actively updating; yes, this causes issues, but not issues like "There was a huge vulnerability found in X version Y, does it affect me?".

in other words, i'd rather have system breakage than insecurity. That's a personal taste, I admit.

that said, the sandboxing aspect behind 'the new ways' is fantastic.

Re:KDE and GNOME seeks $100k to turn Flathub into a Store fo... by AnIdiotOnTheNet on Thursday February 23, 2023 @10:38PM (#34920468)
Why don't you just turny our computer off then? It can't be exploited if it isn't actually running.

Which is to say most people use a computer to run software, so if the software doesn't run the security is pointless anyway.

Sure, if only some software breaks and you can wait for fixes that's a tradeoff, but given that in package maintainer land those fixes could be months or years away...

Re:KDE and GNOME seeks $100k to turn Flathub into a Store fo... by bandrami on Friday February 24, 2023 @01:33AM (#34921561)
I do love the sandboxing, granted. But "let's just hope the app maintainers keep up with our rolling platform deprecations" is a horrible idea.