There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

linux

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

zippythezigzag , in Flathub has passed 2 billion downloads

Im new to Linux and went with Mint. What is flathub? From the name it sounds like an app store or something

Edit: Nevermind. I clicked the link and saw. I was right its an app store

independantiste ,
@independantiste@sh.itjust.works avatar

It’s an app store made for distributing Flatpak applications (desktop apps that work on every distro where Flatpak is installed, most distros install flatpak by default now). Flatpaks also allow isolation between apps and a fine permission system like you get on a smartphone (check out Flatseal for that)

sunzu ,

If you got steam flatpk, flatseal will solve your issues!

Dirk ,
@Dirk@lemmy.ml avatar

I never looked into flatseal and I don’t have any issues with Steam. But I wonder if flatseal can allow a Flatpak Java application to run systemctl poweroff.

Magister ,
@Magister@lemmy.world avatar

Same, I’m using MX Linux with native .deb and never ever installed a flatpak, so I have no clue what it is

possiblylinux127 , in How to prevent files from being displaced? This protection should (somehow) persist through disk cloning.

What are you trying to do? Why don’t you just use full disk encryption?

poki OP ,

I already use FDE. However, unless I’m wrong, FDE does not protect disk clone from occurring. Therefore, if one has access to the password, then also they have access to all my files; including the ones I specifically want to protect. Am I wrong?

So, I’ll make it simple for ya, you don’t need to understand why; however, I seek for some method that prevents files from being copied through disk cloning. Them files being encrypted or whatsoever doesn’t do a thing if the password is known. Unless you propose a method by which the password used to decrypt/unlock the disk on device X doesn’t work when it’s cloned to another disk. If, somehow, one has to rely on another password to decrypt the disk on device Y, then that might make it work out.

possiblylinux127 ,

I don’t think that’s possible without an OS. For encryption you need a strong passphrase.

poki OP ,

Alright. Thank you for your input!

schwim , in I was looking at the firefox flatpak on flathub. Won't this warning make a non tech-savy user anxious? This might make them think they'll get a virus or something like that.

Yes but surely you’re aware that even the most new-user-friendly distros and their tools aren’t necessarily aimed at new users.

That warning is a perfect example of how Linux developers choose which hill to die on. They post a warning for an app that everyone knows can deliver bad times to two camps of users; those that know and don’t care and those that don’t understand the warning. If we could quantify the helpfulness of that warning, odds are that it saved 0 users from malicious action from that avenue of attack.

Never expect Linux as a whole to be “helpful” to the new crowd.

orcrist ,

Isn’t this why we’d expect new users to use a built-in package manager? Because it avoids this exact problem?

schwim ,

Which is why I said “linux as a whole”. Many distros will try to undo the nerdery and neckbeardism that is built into the parent distros but as a whole, linux is going to always be less welcoming to a new user than someone that’s used to useless warnings and repeated password entries for elevated privileges. Being safer and being new-user-friendly rarely go hand in hand.

areyouevenreal ,

Not all user friendly distros have a parent distro. Checkout Solus.

There are sometimes things upstream causing problems. The Linux kernel itself isn’t one of them though as Linus is pretty adamant that Linux distributions should be easy to setup and use. KDE is also designed to be pretty friendly while being customizable still. The main issues seem to come from apps and distributions.

savvywolf , in I was looking at the firefox flatpak on flathub. Won't this warning make a non tech-savy user anxious? This might make them think they'll get a virus or something like that.
@savvywolf@pawb.social avatar

I like flatpaks and flathub, but this is just something they do badly. I think as well they also have “probably safe” which is just as unhelpful… And what does “access certain files and folders” even mean!?

I think they should just follow the example of every other app store; list the permissions in an easily understandable list and let the user decide whether or not they are comfortable with it.

federino OP ,

I think they should just follow the example of every other app store; list the permissions in an easily understandable list and let the user decide whether or not they are comfortable with it.

Totally agree. The “verified” label will give new users enough comfort, and the ones who wish to know more will read the permissions.

Onihikage ,
@Onihikage@beehaw.org avatar

When I look at Firefox in Discover, it only shows the list of permissions the flatpak will be given out of the box, with no warning of it being “potentially unsafe.” This certainly does seem like the better way to handle it.

Also, the warning on the Flathub website is clickable - it expands into the full permissions list. Why it defaults to “no information except maybe dangerous” is beyond me.

Bitrot ,

That is a clickable menu that explains exactly what the permissions are.

raspberriesareyummy , in I was looking at the firefox flatpak on flathub. Won't this warning make a non tech-savy user anxious? This might make them think they'll get a virus or something like that.

isn’t flatpak by definition relying on a second software source, hence 2x as much risk as relying on a single source (your OS repo)?

rotopenguin ,
@rotopenguin@infosec.pub avatar

How much sandboxing is your distro generally doing?

raspberriesareyummy ,

beyond root processes, none that I am aware of. Hence I configured all my internet applications and steam to run in a jail :) firejail & bubblewrap come as native packages, unlike the flatpak contents

AProfessional ,

A distro has thousands of independent sources. No your distro doesn’t audit them all, barely any.

raspberriesareyummy ,

“barely any” is neither entirely accurate, nor does it excuse the use of flatpaks.

eveninghere , in Flathub has passed 2 billion downloads

As a professor I have to say… the site admin skipped the class that taught them to include always the color bar.

mlg , in Flathub has passed 2 billion downloads
@mlg@lemmy.world avatar

I’m gonna be honest I’ve never had a flatpak version of something ever work properly.

There was even one popular media player that only came in flatpak form or otherwise build from source.

So obviously, for no reason at all, it barely functioned compared to other applications I had already tried.

Congrats to you people put there somehow running things like Steam with no problems lmao.

corsicanguppy ,

I’m gonna be honest I’ve never had a flatpak version of something ever work properly.

As someone once involved with OS Security, I beg you not to use FlatPaks.

mrvictory1 ,

Flatpak is not perfect security-wise but is a step in the right direction

pumpkinseedoil ,

Why?

independantiste ,
@independantiste@sh.itjust.works avatar

You can’t just make a statement like this without giving a hint of evidence or justification

lemmytellyousomething ,

I have like 20 flatpak software products running without any problem for 2 years now.

Kusimulkku ,

Your system might be messed up

Gueggel ,

Here only the core OS and the basic part of the DE is from the Linux repository. The rest are all flatpaks.

rotopenguin , in I was looking at the firefox flatpak on flathub. Won't this warning make a non tech-savy user anxious? This might make them think they'll get a virus or something like that.
@rotopenguin@infosec.pub avatar

I just typed “xdg-download:𝗰𝗿𝗲𝗮𝘁𝗲” into flatseal, my browser is safe af now.

possiblylinux127 , in I was looking at the firefox flatpak on flathub. Won't this warning make a non tech-savy user anxious? This might make them think they'll get a virus or something like that.

In short, no

umbrella , in Flathub has passed 2 billion downloads
@umbrella@lemmy.ml avatar

i hope it does 20 billion

fireshell , in darktable 4.8.0 released
@fireshell@lemmy.ml avatar

in general, it was interesting to read, nothing more

thingsiplay , in List of versions (stable, LTS, unstable etc) of major distributions from fastest to slowest updates?

Such a list makes no sense. What do you try to find out, its better to ask in a normal way instead like asking ChatGPT question phrases. What is your goal? Does it include Gaming in example? You should learn what stable vs unstable means, what LTS stands for and what a rolling release is. Some distributions follow a fixed release cycle, but that does not mean they update everything in the system. So is it slow or fast? There are so much nuances to this. Maybe this list helps you: en.wikipedia.org/…/Comparison_of_Linux_distributi…

delirious_owl , in Flathub has passed 2 billion downloads
@delirious_owl@discuss.online avatar

Great opportunity to inject malware to so many vulnerable peeps then

lord_ryvan ,

You could say that with any program distribution. At least flatpaks are containerised.

delirious_owl ,
@delirious_owl@discuss.online avatar

Nah. Most distro package managers verify their packages authenticity with cryptography since the early noughts

orcrist , in I was looking at the firefox flatpak on flathub. Won't this warning make a non tech-savy user anxious? This might make them think they'll get a virus or something like that.

Pushing someone new to Linux to use Flatpak? Shame on you.

TheGrandNagus ,

Huh? Flatpaks are great and there’s no real reason why they’d be unsuitable for a new user.

Chewy7324 ,

Many flatpaks are not aware of their sandbox and thus have a bad ux.

E.g. flatpak Steam can’t access SteamLibraries at a non-default location, unless the user manually allows the path through flatseal. The same is true for other similar apps which don’t use the file portal.

Issues like this are unexpected for new users and thus it can be argued that flatpak aren’t a good recommendation for new users. I personally disagree because most flatpak work flawlessly and work everywhere independent of a users distro.

orcrist ,

Flatpak is one extra step. If apt or rpm already has what you want, which is true for many new users, why would we push them towards scary click thru action?

Jocker , in I was looking at the firefox flatpak on flathub. Won't this warning make a non tech-savy user anxious? This might make them think they'll get a virus or something like that.

Yesss! It’s too aggressive

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines