this post was submitted on 03 Oct 2023
696 points (93.6% liked)

linuxmemes

20762 readers
2175 users here now

I use Arch btw

Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS
[email protected]
[email protected]
696
I'm probably going to get a lot of explanations in the comments (lemmy.world)
submitted 11 months ago by [email protected] to c/[email protected]
148 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 2 points 11 months ago* (last edited 11 months ago) (1 children)

I don't really consider myself a power user, so I'll use flatpak if it's easy to use and doesn't block certain features. Otherwise I'll just look for an appimage or debian package because I already know how to use those.

The biggest issue I see is big labels like "potentially unsafe" and "proprietary" on flathub that scare people away from popular, well trusted non-FOSS software like Discord. At the same time, FOSS-friendlyness is one of the selling points for many people. How can it appease both camps?

Plus, casual users aren't going to flathub to download programs, they're downloading from the software site. Since most of the most popular flattpak images are not officially verified by the software owners, nothing is linking to them to increase their popularity.

[โ€“] [email protected] 3 points 11 months ago

Yeah, I agree, I don't like that aspect of flatpak development either. The idea that the containerization is supposed to provide some kind of resistant form of a sandbox that prevents malicious programs from breaking into your system; I don't buy it.

Look, you need to trust your application sources, there is no way around that. The idea that this is supposed to be a "safer" way to install software than any other package manager is silly.

I still like that flatpak apps are separated from your system and locked to their own dependencies because it makes these apps more portable to different distros. But not for security reasons.