3 ms·

Debian stable users missed heartbleed entirely. I think the glacial pace is underrated.

• krferriter 1y ago
  Glacial page bedrock of an OS with optional sandboxed more-up-to-date userspace packages and runtimes that can be layered on top of the host system was the dream of flatpak/snap/appimage, right?
  • bandrami 1y ago
    Yes, though that comes with its own headaches since the data those sandboxed applications are supposed to touch are the only actually valuable data on my computer. (How many versions of OpenSSL are currently running on my Silverblue system? I literally couldn't tell you.) My spreadsheet is only vouched for by some random dude on Flathub and it can steal all my financial information. But at least it can't add a printer, or delete a system file that I can freely download from the Internet at any time.
    • rlpb 1y ago
      This a decent observation, but I would add that some other Flatpak app that you run might be correctly sandboxed from accessing your financial information, and this is the real benefit of such a system.
• rs_rs_rs_rs_rs 1y ago
  > Debian stable users missed heartbleed entirely Missed it? Not at all, Debian pioneered that style of bugs years before! https://github.com/g0tmi1k/debian-ssh https://github.com/g0tmi1k/debian-ssh
  • bandrami 1y ago
    And the default SELinux config was broken for like 15 years IIRC. It's always pick your poison.