3 ms·
It's a totally different concern. I don't understand how PPAs and similar distribution approaches (i.e. native packages with hosted build systems) are getting m
by alanfranz 6y ago
It's a totally different concern. I don't understand how PPAs and similar distribution approaches (i.e. native packages with hosted build systems) are getting mingled with flatpak and/or snap sandboxing objectives.
You can distribute open source software via flatpak or snap. And you can create a build system that takes open source software as a source and creates a flatpak or snap distribution.
It's totally possible to hide a backdoor in an open source software.
A working sandbox will prevent certain attacks to your system, whether it was built from an open source or not. This already works on most (all?) mobile operating systems.
- cies 6y agoi was responding to the sandboxing part. not having a sandbox is less of a problem when you run FLOSS (in the context of PPAs that's relevant i think)
- alanfranz 6y ago> not having a sandbox is less of a problem when you run FLOSS (in the context of PPAs that's relevant i think) I disagree. Source auditing is irrelevant for day-to-day software use.