5 ms·

It looks beautiful, but I don't want flatpack anything.

by jaytaylor 6y ago

RachelF 6y ago
Unlike most Linux distro's, the "ultimate edition" is not free.
- 2Gkashmiri 6y ago
  Yeah... last I read up, they kinda sell you KDE connect at a price. yeah . zorin connect... i find that..... uh
  - nerdponx 6y ago
    I find it great, by all means let me pay for something if it means you can use my money to maintain and improve the thing.
    - e3bc54b2 6y ago
      I would support it too, but I'm not sure they contribute anything back upstream.
viraptor 6y ago
You don't have to use it. It doesn't look like anything comes from Flatpak by default.
lokedhs 6y ago
Flatpak is the only practical approach to achieve some degree of isolation on Linux today, unless you are willing to go with Qubes OS. And yes, I know Flatpak has some way to go before it actually reaches that goal, but I don't see any other solution to this problem that Linux users in general seem to be happy just pretending doesn't exist. If not Flatpak, do you have an alternative approach to propose to regular users who just want to be able to run a random application without worrying that it has access to all your information?
- reidrac 6y ago
  > Flatpak is the only practical approach to achieve some degree of isolation on Linux today, unless you are willing to go with Qubes OS. Flatpak tries to solve a problem I don't have. I use the packages from the distro (and you trust the distribution, isn't it?), and it provides any software I need. So I guess it all depends on your requirements.
  - lokedhs 6y ago
    I trust the distribution, I have to because they are they ones delivering the kernel. But I absolutely do not trust any of the software I install from the distribution's repositories. The packager doesn't analyse the code for all the software they add to the distribution, so it cannot be trusted. Personally, I use Qubes OS, but people who's don't still deserve a secure operating system.
    - reidrac 6y ago
      If you are not trusting the packages provided by you distribution, you should switch to a different one. I'm very happy with the packages I get from Debian. https://www.debian.org/doc/debian-policy/ https://www.debian.org/doc/debian-policy/ Add a bit of common sense, and it is enough for me (and I assume for most people, but hey!).
      - lokedhs 6y ago
        There are no distributions that do security testing of all packages. And even if they did, it wouldn't be a guarantee that all software are actually free of security bugs. The solution is to simply not trust the software at all. This is the approach Qubes OS takes, and works really well. Most regular users don't really need to go as far as Qubes OS does though, and application level isolation that Flatpak is trying to achieve is enough. I don't see how anyone can accept that any random piece of software is allowed to access all your personal files is acceptable. We certainly don't accept it on mobile platforms (how many posts do we see here about applications that scrape user's contacts?) so why should we accept it on the desktops?

It looks beautiful, but I don't want flatpack anything.

RachelF 6y ago

Unlike most Linux distro's, the "ultimate edition" is not free.

2Gkashmiri 6y ago
Yeah... last I read up, they kinda sell you KDE connect at a price. yeah . zorin connect... i find that..... uh
- nerdponx 6y ago
  I find it great, by all means let me pay for something if it means you can use my money to maintain and improve the thing.
  - e3bc54b2 6y ago
    I would support it too, but I'm not sure they contribute anything back upstream.

viraptor 6y ago

You don't have to use it. It doesn't look like anything comes from Flatpak by default.

lokedhs 6y ago

Flatpak is the only practical approach to achieve some degree of isolation on Linux today, unless you are willing to go with Qubes OS. And yes, I know Flatpak has some way to go before it actually reaches that goal, but I don't see any other solution to this problem that Linux users in general seem to be happy just pretending doesn't exist. If not Flatpak, do you have an alternative approach to propose to regular users who just want to be able to run a random application without worrying that it has access to all your information?

reidrac 6y ago
> Flatpak is the only practical approach to achieve some degree of isolation on Linux today, unless you are willing to go with Qubes OS. Flatpak tries to solve a problem I don't have. I use the packages from the distro (and you trust the distribution, isn't it?), and it provides any software I need. So I guess it all depends on your requirements.
- lokedhs 6y ago
  I trust the distribution, I have to because they are they ones delivering the kernel. But I absolutely do not trust any of the software I install from the distribution's repositories. The packager doesn't analyse the code for all the software they add to the distribution, so it cannot be trusted. Personally, I use Qubes OS, but people who's don't still deserve a secure operating system.
  - reidrac 6y ago
    If you are not trusting the packages provided by you distribution, you should switch to a different one. I'm very happy with the packages I get from Debian. https://www.debian.org/doc/debian-policy/ https://www.debian.org/doc/debian-policy/ Add a bit of common sense, and it is enough for me (and I assume for most people, but hey!).
    - lokedhs 6y ago
      There are no distributions that do security testing of all packages. And even if they did, it wouldn't be a guarantee that all software are actually free of security bugs. The solution is to simply not trust the software at all. This is the approach Qubes OS takes, and works really well. Most regular users don't really need to go as far as Qubes OS does though, and application level isolation that Flatpak is trying to achieve is enough. I don't see how anyone can accept that any random piece of software is allowed to access all your personal files is acceptable. We certainly don't accept it on mobile platforms (how many posts do we see here about applications that scrape user's contacts?) so why should we accept it on the desktops?