3 ms·
> The distribution's packagers handle most of this. And often fuck it up and introduce bugs or even vulnerabilities, intentionally ignore the developer, or sim
by AnIdiotOnTheNet 7y ago
> The distribution's packagers handle most of this.
And often fuck it up and introduce bugs or even vulnerabilities, intentionally ignore the developer, or simply fail to update packages in a reasonable time frame.
Relying on free labor to package software for you is a terrible terrible idea that helps keep Linux Desktop a shitshow.
- doesnt_know 7y agoDisagree strongly and as a user I feel distributions and package maintainers are a necessary defense against overly opinionated developers. I'm glad there is a layer there that will patch and configure to better integrate into the system and in some (very rare) cases remove user hostile "functionality".
- icedchai 7y agoSometimes it's better to trust the developers, not the packagers. Example is the Debian SSH vulnerability from 2008: https://www.debian.org/security/2008/dsa-1576 https://www.debian.org/security/2008/dsa-1576 This was a bug introduced in packaging. See https://lwn.net/Articles/281436/ https://lwn.net/Articles/281436/ for more details.