• 3 Posts
  • 14 Comments
Joined 2 年前
cake
Cake day: 2023年6月13日

help-circle











  • Ah, if it’s only available on flatpaks, that’s why few people know about it.

    Flatpak is a very insecure method to download software BTW, you probably should avoid it

    Edit: It’s curious that I’m getting downvoted for stating a fact. It seems a lot of flatpak users don’t understand security. But that’s kinda the point: even the flatpak developers don’t understand the difference between integrity and authenticity

    Flatpak currently does not provide authenticity, and one developer made it clear that he doesn’t understand why that matters in the above ticket that requested signatures of packages back in 2016. It’s been 7 years and still they haven’t fixed this. I don’t think the flatpak team understands or cares about security.