• Are you using Flatpaks?
  • Are you trusting Flathub?
  • Do you bother about the sandboxing and security?
  • michaelmrose@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 year ago

    If we admit that then an app store where anyone can create an account and upload software becomes extremely problematic. This is especially true wherein clients autoupgrade very quickly.

    Step one. Legit package a popular app Step two. Wait for substantial uptake Step three. Mix in some ad or malware and watch a tens of thousands get instantly owned.

      • michaelmrose@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        Anyone can't become a packager in 30 seconds in an automated process that they can' t repeat the 47th time they transmit malware.

        • AProfessional@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 year ago

          The process is identical.

          You show up with a package. It gets a basic review. You are granted commit access to your package. You can push changes.

          There is slightly more oversight in that another mentor often also has commit access but they can’t and don’t review everything.