427
submitted 1 year ago by [email protected] to c/[email protected]
top 50 comments
sorted by: hot top new old
[-] [email protected] 153 points 1 year ago

Nice

Good to see one of the two big packaging hubs do something against malware

[-] [email protected] 14 points 1 year ago

Next step, display the "potential unsafe"-badge next to verified or unverified, that can be found on the same page. In example https://flathub.org/apps/io.github.shiiion.primehack is marked as verified, but if you scroll down you can see the application has full system and data access and is marked as potential unsafe.

[-] [email protected] 10 points 1 year ago
[-] [email protected] 3 points 1 year ago

Snap already marks unverified apps

load more comments (1 replies)
[-] [email protected] 5 points 1 year ago

How does that Help against Malware?

[-] [email protected] 11 points 1 year ago

It makes it obvious to people whether they are downloading Google Chrome as packaged by Google or as by someone else. That being said, Google Chrome is malware. That being said there is a lot more that needs to be done to truly prevent malware, which will be costly but will hopefully take effect when they've got the budget for it

[-] [email protected] 3 points 1 year ago

Because if you search Firefox and see a badge that says verified, you can be confident that it was Mozilla that packaged it and added it to FlatHub as opposed to some random scammer.

[-] [email protected] 1 points 1 year ago

You can't just upload a App to Flathub. Everythng is reviewed.

[-] [email protected] 2 points 1 year ago

Apt has done this forever

load more comments (15 replies)
[-] [email protected] 65 points 1 year ago* (last edited 1 year ago)

This is a good step but I still feel like it's pretty obscure where a package is actually coming from. "by Google" or for the Steam package "by Valve" is really confusing and makes it sounds like it's coming directly from the company. Unverified tells the user to pay attention but there is no hover over to say what it actually means.

[-] [email protected] 63 points 1 year ago

Wait… so the author displayed in “by ” is the supposed author of the software, not the one that put it on the store? That’s insane! Also sounds like you’d be open to massive liability since the reputation of the software author will be damaged if somebody publishes malware under their name.

It should be:

  • Developed by:
  • Uploaded by:
[-] [email protected] 7 points 1 year ago

Also maaany packages direct to issuetrackers of projects not supporting that flatpak.

If someone knows where that flathub metadata is stored I would love to know, as the manifest is not it. I would like to fix those to link to their own bugtrackers

[-] [email protected] 19 points 1 year ago

Traditional GNU/Linux distributions (as well as F-Droid) are not "app stores" even though they are superficially similar. Traditional distributions are maintained and curated by the community, and serve the interests of users first and software developers second, whereas an "app store" has minimal curation and serves the needs of software developers first and users second.

I point this out because there's an annoying meme that traditional distributions are obsoleted by the "app store" model. I don't think that's the case. "Verification" is essential for an app store but pointless for a distribution.

[-] [email protected] 13 points 1 year ago

So all of them?

Would be nice if FlatHub actually supported cryptographic verification of apps..

load more comments (10 replies)
[-] [email protected] 10 points 1 year ago

great, when appimage hub begin doing this

[-] [email protected] 8 points 1 year ago

I still don't understand why a central repository for AppImages exist. The moment you are using a repository (and possibly version management), the format looses its reason to exist.

[-] [email protected] 10 points 1 year ago

I don't see how that's true. The main point of AppImage is it 'just works' on any distro. If you have one primary place to distribute them to any distro - it's still meeting AppImage's vision.

[-] [email protected] 9 points 1 year ago

To be fair, after some thinking I think you are right and I was a bit in a tunnel vision logic. My previous statement looks a bit foolish now.

[-] [email protected] 6 points 1 year ago* (last edited 1 year ago)

No. Appimages are selfcontained and thus useful for archiving software or carrying it around in random ways. Flatpak could do this too but not as easy.

Still, don't use Appimages

load more comments (7 replies)
[-] [email protected] 5 points 1 year ago

What app is that GUI from?

[-] [email protected] 31 points 1 year ago

This screenshot is from the Flathub website. The only good GUI for Flatpaks...

[-] [email protected] 26 points 1 year ago

The only good GUI for Flatpaks…

Ain't that the truth. I don't know why KDE Discover is so sluggish when it comes to Flatpak, it takes me like 10+ seconds to load the landing page and see the popular apps.

[-] [email protected] 12 points 1 year ago

And several minutes to update a 10MB app...

[-] [email protected] 5 points 1 year ago* (last edited 1 year ago)

what? there's something wrong with your internet

[-] [email protected] 6 points 1 year ago* (last edited 1 year ago)

Nah, it's Discover that's shit. Flatpak's CLI works fine.

[-] [email protected] 4 points 1 year ago

Seriously why does Gnome software feel so much faster!

[-] [email protected] 4 points 1 year ago

First time I've heard someone call Gnome Software fast. In my experience that app feels like it's on it's last legs; the Flatpak CLI is far better than any desktop GUI.

[-] [email protected] 4 points 1 year ago* (last edited 1 year ago)

Gnome Software has received numerous updates over the last few years which make it considerable faster. Searching and viewing apps is now fast enough to be usable, compared to it taking many seconds to minutes for basic tasks.

I've stopped removing Software on every system, altough I'm not usually using it. I've not tested it, but I feel like Discover is now slower than Software.

[-] [email protected] 3 points 1 year ago

COSMIC Appstore ;D

[-] [email protected] 1 points 1 year ago* (last edited 1 year ago)

I'm not saying it's fast; I'm saying that it's faster than KDE Discover

load more comments (1 replies)
load more comments (2 replies)
[-] [email protected] 4 points 1 year ago

Gnome Software is pretty similar. KDE Discover way worse.

load more comments
view more: next ›
this post was submitted on 28 Mar 2024
427 points (98.4% liked)

Linux

55003 readers
561 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS