News for hackers. Stuff that matters.

A comment on Ubuntu stops shipping Flatpak by default. Parent comment

Re:Ubuntu stops shipping Flatpak by default by m4rtink on Wednesday March 29, 2023 @11:37AM (#35358782)
Not to mention it introduces a single point of failure, that once compromised can start pushing malware directly to user.

With maintainers in the loop, there is at least one more person that can notice something is fishy. Not to mention there is usually so time before packages are updated, so there is more time to notice an attack.

[ Parent | on HN ]
Re:Ubuntu stops shipping Flatpak by default by AnIdiotOnTheNet on Wednesday March 29, 2023 @01:19PM (#35360267)
> With maintainers in the loop, there is at least one more person that can notice something is fishy

Also one more person who can inject malware or break something. How did that Debian keygen issue happen again? Oh right.

[ Parent | on HN ]
Re:Ubuntu stops shipping Flatpak by default by bombolo on Thursday March 30, 2023 @02:46AM (#35368959)
> How did that Debian keygen issue happen again?

The people on the openssl mailing list said it was fine. That's how it happened.

[ Parent | on HN ]
Re:Ubuntu stops shipping Flatpak by default by AnIdiotOnTheNet on Thursday March 30, 2023 @08:21AM (#35371501)
And yet the upstream developers themselves never incorporated the change, it was entirely because an unnecessary third party middle man made unnecessary changes.
[ Parent | on HN ]