Linux

14242 readers

874 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

140

Signal AppImage now officially available for Linux (aboutsignal.com)

submitted 1 day ago by cm0002@lemdro.id to c/linux@programming.dev

24 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] KSPAtlas@sopuli.xyz 20 points 1 day ago (1 children)

IMO flatpaks are a better option, appimages are just bringing people back to the insecure "find it on a website and download it" method of package management

This is also one of the reasons why I dislike curl sh

[–] lukalix98@programming.dev 6 points 1 day ago (3 children)

Flatpaks can be unsafe too though.

[–] AudaciousArmadillo@piefed.blahaj.zone 5 points 15 hours ago

Same goes for .debs from Debian stable. There is no absolute safety. But downloading unsigned code from a random website is far down the safe list.

[–] Marija_@programming.dev 2 points 12 hours ago

I still prefer repositories, but official AppImages beat unofficial downloads.

[–] spectrums_coherence@piefed.social 3 points 13 hours ago* (last edited 13 hours ago)

AppImage defended and used grossly outdated core component like FUSE2 for a long time, and comes with zero sandboxing by default.

IMO, flatpak needs to improve in terms of security, but it is a strict improvement over AppImage.