News for hackers. Stuff that matters.
Re:Ubuntu stops shipping Flatpak by default by prmoustache on Wednesday March 29, 2023 @09:23AM (#35356917)
History has shown that application developers are very bad at releasing good deliverable without too much security holes in the packaged libraries or bad practices. And the sandboxing in flatpak is actually meant to protect users from harm done by clueless devs but it fails because devs can actually build non sandboxed flatpaks and they will do it because they don't care
Re:Ubuntu stops shipping Flatpak by default by doublepg23 on Wednesday March 29, 2023 @10:28AM (#35357792)
Why would you use software if you think the dev is too incompetent to package it?
Re:Ubuntu stops shipping Flatpak by default by tremon on Wednesday March 29, 2023 @11:09AM (#35358375)
Because I trust that distro maintainers catch the most obvious errors before packaging and releasing the software.
Re:Ubuntu stops shipping Flatpak by default by ninkendo on Wednesday March 29, 2023 @04:14PM (#35362788)
Package it for what? There are a lot of distros. Should the dev be packaging it for every one of them? Debian, red hat, suse, arch, other more esoteric ones? Which distro versions? How many years back should they be maintaining the packages?
Re:Ubuntu stops shipping Flatpak by default by doublepg23 on Friday March 31, 2023 @12:05AM (#35382413)
…the context was Flatpaks and snaps which directly address it by simplifying the process… the developer would explicitly avoid that confusion.
Re:Ubuntu stops shipping Flatpak by default by curt15 on Wednesday March 29, 2023 @11:11AM (#35358418)
How often do distribution maintainers actually audit the package source code?
Re:Ubuntu stops shipping Flatpak by default by prmoustache on Thursday March 30, 2023 @05:23AM (#35370073)
I wasn't talking about audit but dependency lifecycle.
Re:Ubuntu stops shipping Flatpak by default by ranger207 on Wednesday March 29, 2023 @11:31AM (#35358694)
History has shown that distro maintainers aren't perfect at patching security vulnerabilities either and that sandboxing is useful regardless. It also shows that user want working software and will go through the effort of inventing new package formats like flatpak to work around distro maintainers. Maintainers now have a choice between complaining that everyone else is doing it wrong and eventually becoming irrelevant, or getting with the program and maybe even offering their expertise to accomplish what people want to do
Re:Ubuntu stops shipping Flatpak by default by prmoustache on Wednesday March 29, 2023 @03:50PM (#35362401)
Flatpak hasn't been invented by users but by distro maintainers.