3 ms·
> Most programs can download new code and open whatever files they want as long as their process has the permissions We should avoid and shame the programs tha
by dependenttypes 7y ago
> Most programs can download new code and open whatever files they want as long as their process has the permissions
We should avoid and shame the programs that do that. This is literally a backdoor.
- tomatotomato37 7y agoYou would have to add every program with an auto-updater onto that list, because that's what they literally do; take files streamed online and slap them into its install directory Like shit, I have 3rd party mod managers for video games that are exclusively built to do such that
- smichel17 7y agoMost programs I use (on Linux) do not come with an auto updater. Instead, I get updates through my distro's package manager. I have Discord installed, because unfortunately that's where my friends are. However, it cannot access arbitrary parts of the file system because it is installed via flatpak; it only has access to ~/Downloads and ~/Pictures.
- m4rtink 7y agoThis is one benefit of Linux distro package managementany people forget - apps can't just update themeselves (possibly after their updater being compromised) but go via package maintainers and are built from source on trusted distro infrastructure.