PabloDiscobar ,
@PabloDiscobar@kbin.social avatar

First, most of the people I saw discussing it support flatpak, not packages. They support flatpak like they support a football team. example here: "Mostly because they're uneducated fools".

It's all about reputation. There are people I trust, like Steam and there are perfect strangers from the internet. Who do you trust the most between "debian VS mastakilla_51"?

Wake me up when a flatpak app is thought with clear boundaries and doesn't just request access to my whole home directory. Until then I much prefer to have a team of packager maintaining a reputation, dedicated to their job and producing fine, reliable apps.

The Audacity fiasco was a perfect example of that. The apps was bought by someone, then telemetry was introduced into the flatpak and no one saw it. Instead, the distro maintainers noticed it and deactivated the telemetry. This is how we saw the thing.

Be very careful of what you lose when you say goodbye to distro packages, don't take it for granted. If you walk the flatpak way you will have access to a mountain of unverified software built by a random person of the internet having access to your full homedir. It's like installing freewares on Windows, you end up with a lot of crap on your computer. A packages repo is not like freewares for Windows.

Yes, I know, you think flatpaks come with sandboxing. It does not, because most of these packages use /home as the sandbox anyway and people click yes. Pick some flatpaks and see the access level their require. Most of the time it's /home. This is a terrible trend and I wished more of the flatpak supporters mentioned it when they praise the tool. Some people don't care. I do.

Cryptocurrency does nothing to help you since it gives a very strong incentive to criminal to scan your homedir. Scammers will use shiny software, flatpak it, add their "secret sauce" and publish it. If you had to install a cryptowallet, would you install the one from the debian repo of the one from mastakilla_51?

Until this whole jungle is sorted out: thanks, but no thanks.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • [email protected]
  • All magazines