30 ms·
I'm out here imagining all the unethical hackers drooling over the sweet sweet vectors that are snap and flatpak. Unfortunately the qa and auditing aspects of d
by hyperion2010 7y ago
I'm out here imagining all the unethical hackers drooling over the sweet sweet vectors that are snap and flatpak. Unfortunately the qa and auditing aspects of distro packaging seem to be taken for granted, and the resources for that are surely not sufficient to counter motivated adversaries.
- antod 7y agoDon't forget helm charts and docker containers. The security/assurance of that supply chain is pretty lacking. It feels like some people are actively applying the (historical?) Wordpress security model to Kubernetes for expediency.
- snazz 7y agoDo enough people actually use Snap or Flatpak (especially at large companies) to make it worth anything? I’d imagine that most people would just use real distro packages and stuff compiled from source instead of trusting Snapcraft or random Flatpaks off the Internet, especially in production.