• 18 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle










  • Ah, if it's only available on flatpaks, that's why few people know about it.

    Flatpak is a very insecure method to download software BTW, you probably should avoid it

    Edit: It's curious that I'm getting downvoted for stating a fact. It seems a lot of flatpak users don't understand security. But that's kinda the point: even the flatpak developers don't understand the difference between integrity and authenticity

    • https://github.com/flatpak/flatpak-builder/issues/435

    Flatpak currently does not provide authenticity, and one developer made it clear that he doesn't understand why that matters in the above ticket that requested signatures of packages back in 2016. It's been 7 years and still they haven't fixed this. I don't think the flatpak team understands or cares about security.