4 ms·

+1 Insightful. > GNOME Calculator was put on the ISO as a snap to help us test the whole “seeding snaps” process, not because it was a fast-moving, CVE-prone a

+1 Insightful. > GNOME Calculator was put on the ISO as a snap to help us test the whole “seeding snaps” process, not because it was a fast-moving, CVE-prone applications. Chromium, Firefox and LibreOffice fall more into that category. Ok so the whole snap thing comes down to updating browsers. Is this for real? I want the web, not the browser to change daily, or to consume more bandwidth than my www usage :)

lucb1e 7y ago
The browser is actually the number one component you should update as soon as a security fix comes out. If you don't want new features ("more free stuff!"), use an LTS version that only includes the security updates?
- Macha 7y ago
  You can note the version everyone is complaining about here _is_ the LTS.
  - lucb1e 7y ago
    You mean the Ubuntu LTS, I meant a browser's LTS version (a sibling comment just mentioned it's called ESR in Firefox instead of LTS... I meant the concept, not the specific name for Firefox, but my bad) so that you don't keep getting browser feature updates but only get the backported fixes.
- pdonis 7y ago
  > The browser is actually the number one component you should update as soon as a security fix comes out. The problem is that there is no way to have a browser that only pushes updates for security fixes. They're always mixed in with changes to the UI that force people to re-learn workflows. > If you don't want new features ("more free stuff!"), use an LTS version that only includes the security updates? There is no such thing. I run Ubuntu 16.04 LTS on all my computers at home and I'm posting this on, IIRC, the fifth or sixth new version of Firefox I've had to accept (and that's only counting major version changes), because, as noted above, there was no way to just get the security updates and leave out the others.
  - gruez 7y ago
    >The problem is that there is no way to have a browser that only pushes updates for security fixes Yes there is, it's called firefox esr.
    - pdonis 7y ago
      Interesting, I'll take a look.
Izkata 7y ago
That... doesn't make sense. Chrome and Firefox (and possibly Chromium, I'm uncertain there) already can update out-of-band of apt/etc.
- eloisant 7y ago
  The idea is that the vendor can take care of the updates without having to go through all the package management system of all distributions
  - curt15 7y ago
    When you install Google Chrome for a deb, it's already set to update through Google's own apt repository. Presumably Firefox could do the same.
    - Izkata 7y ago
      > Presumably Firefox could do the same. At least when I encountered it a few years ago, if you go to Help -> About Firefox in the menu, it'll check for updates in the background, download the most recent version, and upgrade itself the next time you restarted the browser. And yes, this was on Ubuntu. So the capability is there, even if it's not on generally.
skykooler 7y ago
Which is really frustrating as a user; I don't want to wait 5 seconds for a calculator to launch; it's a simple app, it should launch instantly, like it does on any other Linux distro.

lucb1e 7y ago

The browser is actually the number one component you should update as soon as a security fix comes out. If you don't want new features ("more free stuff!"), use an LTS version that only includes the security updates?

Macha 7y ago
You can note the version everyone is complaining about here _is_ the LTS.
- lucb1e 7y ago
  You mean the Ubuntu LTS, I meant a browser's LTS version (a sibling comment just mentioned it's called ESR in Firefox instead of LTS... I meant the concept, not the specific name for Firefox, but my bad) so that you don't keep getting browser feature updates but only get the backported fixes.
pdonis 7y ago
> The browser is actually the number one component you should update as soon as a security fix comes out. The problem is that there is no way to have a browser that only pushes updates for security fixes. They're always mixed in with changes to the UI that force people to re-learn workflows. > If you don't want new features ("more free stuff!"), use an LTS version that only includes the security updates? There is no such thing. I run Ubuntu 16.04 LTS on all my computers at home and I'm posting this on, IIRC, the fifth or sixth new version of Firefox I've had to accept (and that's only counting major version changes), because, as noted above, there was no way to just get the security updates and leave out the others.
- gruez 7y ago
  >The problem is that there is no way to have a browser that only pushes updates for security fixes Yes there is, it's called firefox esr.
  - pdonis 7y ago
    Interesting, I'll take a look.

Izkata 7y ago

That... doesn't make sense. Chrome and Firefox (and possibly Chromium, I'm uncertain there) already can update out-of-band of apt/etc.

eloisant 7y ago
The idea is that the vendor can take care of the updates without having to go through all the package management system of all distributions
- curt15 7y ago
  When you install Google Chrome for a deb, it's already set to update through Google's own apt repository. Presumably Firefox could do the same.
  - Izkata 7y ago
    > Presumably Firefox could do the same. At least when I encountered it a few years ago, if you go to Help -> About Firefox in the menu, it'll check for updates in the background, download the most recent version, and upgrade itself the next time you restarted the browser. And yes, this was on Ubuntu. So the capability is there, even if it's not on generally.

skykooler 7y ago

Which is really frustrating as a user; I don't want to wait 5 seconds for a calculator to launch; it's a simple app, it should launch instantly, like it does on any other Linux distro.