5 ms·

> There's no reason to scare users away from independent software distribution. Can you please for the love of Zeus make up your mind already? "Installing rand

• Shared404 6y ago
  > "Installing random software from the Internet - bad! Linux good because package manager!" Yes. > Microsoft offering a "store" (most software on it is free anyway) and allowing signed installers that won't trigger warnings - also bad! Yes, but ONLY because they require you to create a Microsoft account. If you could use it without the account, then it would be fine. Edit: I also tend to trust package maintainers for established distro's more than I trust Microsoft's QA. This is just me though so only partially relevant. > So which is it? And more importantly, how is this any way worse than the common practise in Linux to install 3rd party software via some variation of "wget -O https://some.totally.trustworthy.website/install https://some.totally.trustworthy.website/install | sudo bash" that won't show any warning whatsoever? (Windows Store) is worse than (random.exe)||(wget -O some.stupid.site/something.sh | sudo bash) is worse than (Proper package manager)
  • qayxc 6y ago
    > (Windows Store) is worse than (random.exe)||(wget -O some.stupid.site/something.sh | sudo bash) is worse than (Proper package manager) Why? Name a technical reason and not ideological BS, please. I've yet to hear a proper argument that isn't just "because Microsoft".
    • Shared404 6y ago
      Technical reason: Microsoft's moderating is kinda garbage. I don't trust them to keep malware out of the store effectively. Edit: I trust my capability to moderate the sites I download from more than I trust Microsoft to prevent malware on the store. "Ideological BS": I don't think wanting to stop account proliferation is "ideological BS" I have a certain number of accounts, I want less. I see no reason to make more. Ideological BS: I don't trust Microsoft to not do more tracking than I find ethical.
      • qayxc 6y ago
        > I trust my capability to moderate the sites I download from more than I trust Microsoft to prevent malware on the store. So you are implying that your personal capabilities reflect the majority of users out there? That's a bold assumption! The Windows Store is meant for a general audience, and the general audience are users that ended up with 10 rows of custom "toolbars" in their browser after a few days of using the internet. The fact that you trust your own abilities over those of Microsoft (of course without giving a concrete example to justify your mistrust) has nothing to do with millions of non-tech savvy users that would otherwise just download Krita.Totally.Not.Malware.Believe.Us.exe from webshop24.ru, because they clicked on that cute cat image that told them to...
        • Shared404 6y ago
          > The Windows Store is meant for a general audience, and the general audience are users that ended up with 10 rows of custom "toolbars" in their browser after a few days of using the internet. Maybe at one point, but at this point the general audience A) Just does everything in the browser. B) Knows enough to do things right C) Does not yet know enough to do things right, will screw up an install, and learn from experience. D) Will manage to repeatedly screw things up. D is a surprisingly small group, and I'd personally rather group C screw up their stuff and learn. > The fact that you trust your own abilities over those of Microsoft (of course without giving a concrete example to justify your mistrust) has nothing to do with millions of non-tech savvy users that would otherwise just download Krita.Totally.Not.Malware.Believe.Us.exe from webshop24.ru, because they clicked on that cute cat image that told them to... What's to stop me from creating "K-Dev LLC" and putting "Krita+ Ultimate" on the Microsoft store, of course with my own malicious add-ins? As far as "Without a concrete example to justify your mistrust". Yes. I do not have a concrete "I installed this from the Microsoft Store and it was malware story". That being said, Microsoft has repeatedly shown themselves to be ineffective at security. To be clear, They have a _massive_ and extremely difficult task in front of them. I just have no reason to expect it to work, and experience suggesting it won't.
  • techwizard81 6y ago
    >Yes, but ONLY because they require you to create a >Microsoft account. If you could use it without the >account, then it would be fine. You don't need an account to use the Microsoft Store, they nag you about login in, but you can click cancel and the app will still install.
    • _flux 6y ago
      Did you try to install the Windows Terminal from the store?
      • techwizard81 6y ago
        yes, same as all the other one, you can cancel out of login in and it still installs. I never logged into the microsoft store
        • ahtaarra 6y ago
          but you have to close that login dialog every single time you use that App store to download apps which, for me, is infuriating
          • techwizard81 6y ago
            agreed that it's annoying, but not the end of the world neither, I don't install software multiple times a day every day
• AnIdiotOnTheNet 6y ago
  I can't speak for others, but for me there is no need to make up my mind: 1) Installing software directly from the developer --along with being able to develop yourself-- is not only perfectly fine, it's what makes personal computing great. 2) Package management is an over-engineered and inflexible solution that creates more problems than it solves. 3) Installers aren't as bad as package managers but are still overly complex and cause problems. Applications should be single files or directories that can be moved or copied anywhere you want. Numerous OSs had applications work this way by convention and it is also how AppImage works. 4) Application-level security should be applied by default and at the OS level. Mobile OSs got this (mostly) right.
  • Shared404 6y ago
    > 3) Installers aren't as bad as package managers but are still overly complex and cause problems. Applications should be single files or directories that can be moved or copied anywhere you want. Numerous OSs had applications work this way by convention and it is also how AppImage works. I do like this. The only thing that concerns me is disk space (which isn't really that big a deal at this point) and things like crypto libraries. With the crypto libraries, what happens when the statically compiled package has an out of date library/how do you recover without having to upgrade every program individually? (This is a serious question, I'm not trying to be rude. I'm sorry if I come off that way.)
    • AnIdiotOnTheNet 6y ago
      In most systems, but notably not Linux, there is a separation between the "system" and "applications". Things that are part of the "system" are meant to be a reliable platform that anything can use. The platform provides UI, networking, crypto, compression, etc. libraries that are used by basically everything and the self-contained application need only supply its various libfoos that aren't part of the platform.
  • qayxc 6y ago
    > 1) Installing software directly from the developer --along with being able to develop yourself-- is not only perfectly fine, it's what makes personal computing great. Nobody's stopping you from that, not even SmartScreen. The issue is that close to 100% of all malware is installed by users and the critique has been that Microsoft is offering neither sufficient protection nor a safe(r) alternative. SmartScreen and Windows Store - whatever your personal opinion about those might be - are completely optional ways to address this critique. > 2) Package management is an over-engineered and inflexible solution that creates more problems than it solves. All major *nix-based operating systems and their distributions seem to disagree with you on that; Most programming languages included. > 3) Installers aren't as bad as package managers but are still overly complex and cause problems. Applications should be single files or directories that can be moved or copied anywhere you want. Numerous OSs had applications work this way by convention and it is also how AppImage works. And that solves the security and trust issues how? > 4) Application-level security should be applied by default and at the OS level. Mobile OSs got this (mostly) right. Oh yeah, especially mobile OSes where every app wants full access to everything or just won't install/run. Pop-ups are just as bad because now you just train users to simply ignore them. There is no silver bullet here, and SmartScreen isn't some "evil gatekeeper" that just exists to thwart independent software development. It's just an imperfect tool to address security and trust issues with random software packages downloaded from the internet.
• flohofwoe 6y ago
  Google Chrome has a malware scan for downloads that actually seems to work, unlike Microsoft's SmartScreen which seems to be completely broken. Integrated malware protection is a good thing, but it needs to work to be useful (e.g. not automatically flag properly code-signed non-malware as malware). If users see the SmartScreen popup for regular software too often, they are just trained to automatically find and click the "Run anyway" button.
  • qayxc 6y ago
    That's fair, but completely besides the point of the OP. If the complaint is "because it doesn't work well enough", the proper solution is to just disable it, which is of course an option. Crying "foul!", however, is neither constructive nor helpful in way.
    • eitland 6y ago
      > If the complaint is "because it doesn't work well enough", the proper solution is to just disable it, which is of course an option. Crying "foul!", however, is neither constructive nor helpful in way. Are you sure you meant exactly what you wrote? I mean: The correct thing to do if you have a smoke detector that gives false positives isn't to throw out smoke detectors but to complain to the place that sold it and get a new one that works.
      • qayxc 6y ago
        I am sure I mean what I wrote. If someone thinks SmartScreen isn't a good solution, they should disable it. Using a different solution is independent of that. To use your smoke detector analogy: if a smoke detector goes off twice a day and once in the middle of the night every other night, you sure as heck DO throw it out. If only because every false alarm desensitises you to actual alarms and makes your default reaction to just remove the batteries of that thing. The real issue is that the false alarms don't necessarily come from a faulty detector, but are due to the fact that someone keeps smoking in the house or keeps burning their food all the time and then keeps telling everyone that smoking doesn't affect them negatively, because they only smoke one cigarette every other day so smoking is actually safe for everyone and that the detector is to blame for all the false alarms.
• selfhoster11 6y ago
  I trust Linux disto maintainers hell of a lot more to curate software in line with _my_ interests. Microsoft has profit as their overriding goal, so anything that contradicts that will be eradicated from their app store.