this post was submitted on 20 Mar 2024
303 points (98.4% liked)

linuxmemes

24670 readers
2080 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn, no politics, no trolling or ragebaiting.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
  • 5. πŸ‡¬πŸ‡§ Language/язык/Sprache
  • This is primarily an English-speaking community. πŸ‡¬πŸ‡§πŸ‡¦πŸ‡ΊπŸ‡ΊπŸ‡Έ
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
  • 6. (NEW!) Regarding public figuresWe all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
  • Keep discussions polite and free of disparagement.
  • We are never in possession of all of the facts. Defamatory comments will not be tolerated.
  • Discussions that get too heated will be locked and offending comments removed.
  • Β 

    Please report posts and comments that break these rules!


    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 2 years ago
    MODERATORS
    you are viewing a single comment's thread
    view the rest of the comments
    [–] echo64@lemmy.world 38 points 1 year ago* (last edited 1 year ago) (5 children)

    I know we all like to hate on canonical for literally any reason, but this happens with every single software repository that is not a closed garden and some that are.

    And yeah, it's sandboxed, so the damage is far, far less than it could be.

    [–] RegalPotoo@lemmy.world 60 points 1 year ago (1 children)

    Given that the snap store is a closed source proprietary component, I'd argue that snaps are a walled garden

    [–] caseyweederman@lemmy.ca 22 points 1 year ago

    That was supposed to be their one thing.

    [–] trevor@lemmy.blahaj.zone 54 points 1 year ago (1 children)

    Sandboxing does nothing for social-engineering attacks, which is what many of the malicious snaps were designed for.

    And the thing that makes the Snap Store uniquely bad is that there's no human review. Anyone can throw up a malicious snap, and there are very good odds that it'll get served there. Even the Flathub, a community-run project, has human reviews before new apps get published. Canonical, despite having money and resources that community projects don't, can't seem to be bothered to take basic steps to protect their users.

    [–] kautau@lemmy.world 23 points 1 year ago* (last edited 1 year ago)

    Yeah, what’s important to note is snap just requires a web based submission process.

    https://snapcraft.io/docs/using-the-snap-store

    Flathub requires a PR in GitHub, visible to the community. Spammers know they will get caught opening PRs

    https://docs.flathub.org/docs/for-app-authors/submission/

    [–] zephr_c@lemm.ee 25 points 1 year ago

    Canonical is a profitable corporation trying to convince people to use their actual closed garden software repository but they can't even be bothered to do even the most basic of sanity checks to prevent obvious scams from appearing on their store. Stop making excuses for them.

    [–] sirico@feddit.uk 15 points 1 year ago

    I think the main issue here is they are telling users the software is safe without any due diligence.

    [–] ryannathans@aussie.zone 4 points 1 year ago

    Closed garden has the same problem too, it's not immune