4 ms·
My point is that upstream can't always be trusted. With snaps there's no one between you and a potentially bad actor.
by Sir_Cmpwn 8y ago
My point is that upstream can't always be trusted. With snaps there's no one between you and a potentially bad actor.
- Boulth 8y agoIf you don't trust upstream why are you running their code? I don't think it's reasonable for such a small group of people as Debian developers (or any other maintainers) to review each change looking for potentially malicious code. Especially in codebases as big as Firefox.