News for hackers. Stuff that matters.

A comment on Ubuntu 23.10’s New Software App Will Demote Debs (Apparently). Parent comment

Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by amelius on Thursday July 06, 2023 @06:15PM (#36623941)
It's a quite powerful idea to run every package in its own container (sandbox).

However, it depends on the implementation and Snap just sucks.

(Note that the default Unix assumption is that no users can be trusted but all applications can be trusted, which is wrong imho. Containers provide a way out of this, but things get messy very fast.).

[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by goodpoint on Thursday July 06, 2023 @06:41PM (#36624257)
The sandbox is not going to protect users from spyware telemetries, bad security for the application itself, ads, and so on.
[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by amelius on Friday July 07, 2023 @04:32AM (#36628908)
Yes, but right now my smartphone is more secure wrt apps than my desktop, which is odd.
[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by goodpoint on Friday July 07, 2023 @06:30AM (#36629689)
No, you can use a security oriented distribution, plus sandbox the applications you use.
[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by fsflover on Friday July 07, 2023 @05:37AM (#36629321)
> The sandbox is not going to protect users from ... bad security for the application itself

Your other data, in other sandboxes, is protected though.

[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by goodpoint on Friday July 07, 2023 @06:29AM (#36629683)
Sure, but that's far from enough.
[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by fsflover on Friday July 07, 2023 @06:35AM (#36629722)
This is almost the only working security approach: security by compartmentalization.
[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by goodpoint on Tuesday July 11, 2023 @07:08AM (#36679297)
Not at all, it's not enough.
[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by JohnFen on Thursday July 06, 2023 @07:17PM (#36624650)
> It's a quite powerful idea to run every package in its own container (sandbox).

It is, but I also actively don't want every package to run in its own container. I'd rather containerize select applications that I choose.

[ Parent | on HN ]
Re:Ubuntu 23.10’s New Software App Will Demote Debs (Apparen... by amelius on Friday July 07, 2023 @04:34AM (#36628921)
Yes, this is one of many reasons why Snap sucks.
[ Parent | on HN ]