Hopefully both of the people using snaps can recover from this.
Canonical make it hard not to use snaps so only those who took extra steps are not using them.
For a while now the best way to experience Ubuntu is by using something based on it.
Linux Mint is amazing if you want Ubuntu with less bad choices.
Pop!_OS is another great alternative!
Reminds me to donate, been a while since I last did that. Thanks.
Why downstream when you can go upstream?
Sadly that is not true, see snap vs flatpak usage in debian.
Keep criticizing snap (But do it in a way that is trustworthy and valuable), if somebody wants to use snap due to some advantage that is fine but he should make an informed decision
I'd wager a guess and say Debian is probably used on servers more than desktops. I'd wager another guess and say that for server applications many are actually fine with snap
as such, I bring forth the theory that snapd is a popular package on Debian due to it's widespread use on servers, not because tons of people are running bare Debian on their desktops and preferring snaps.
We need more data to say anything about the desktop.
Good thing I can just install applications from apt instead...
user@pc:~$: sudo apt install app
The following additional packages will be installed:
snapd
....oh.
The reason why I'll switch to Debian soon.
IMO Linux Mint is a great replacement, too, although it does not come with the default-Gnome desktop layout
I always find myself going back to Mint.
Same, I feel at home in the Cinnamon DE and no matter how tech savvy I am, the GUI software installer is so much more convenient than using the terminal
Yea, not with firefox, at least not without switching to some third party repo.
I use the ppa because the snap version does not let me use the keypass XC Plug-In or my VPN plug in.
I have the issue that the snap version can't browse files whose path includes a hidden dot file/directory in my home directory. It doesn't seem there's any clean way for me say "no, I give you explicit permission to read these files." My workaround was to sudo mount --bind ~/.foo ~/bar and then browse from ~/bar instead. I'm not sure what they think they were preventing me from doing but they failed.
obtain a plaintext master password from a user workspace, even if the workspace is locked.
You had one job keepass.
Canonical's changes to apt could be considered malicious in and of themselves because it installs from a source you didn't request for, sure seems malicious to me.
Agreed. Switching out .deb packages in the package manager for snap stubs was a bridge too far, and I went back to Debian.
This. This is what really pissed me off about Ubuntu. I even uninstalled (or thought I did) the entire snapd system. But then I went to install something and.....it reinstalled snapd. 🤦
So I moved to Linux Mint which was an excellent experience. And just the other day I replaced that with LMDE 6 (Linux Mint Debian Edition) and I couldn't be happier.
It's the ideal distro for anyone who wants apt but not Ubuntu and doesn't want the pain of manually installing Debian.
Just use Fedora
No way. That's another Corporation backed distro. Most of the Devs are also Red Hat employees
DNF is pretty good, snap i wouldn't touch with a 100 meter pole
As a snap package maintainer i find it weird that there weren't any guardrails in place to avoid situations like this, considering that the main snap consumer are Ubuntu users and Ubuntu is from canonical.
I guess I should've set my expectations a bit lower
I've been... baffled... that all of Canonical's different products don't work better together.
It's not that they don't work better in conjunction, it's canonical's lack of moderation in the snapcraft store.
This could've avoided day one by adding a manual review process (like what they are temporarily doing right now)
I don't know how flathub handles new package submissions, but I think that they definitely need to have a process similar to what other distros have in place for native packages (heck, even Ubuntu's own repos have a review process)
you confuse canonical with fedora or rhel standard... which... is sad... but at least flatpak is the savior in the end. haha..
Red Had has 20x the employees as Canonical, I hope their product is better
Yeah, my bad 😅
I've forgotten that Canonical is not like Fedora or Red Hat
...but at least flatpak is the savior in the end.
Flatpak definitely has a potential, I use them daily. Haven't had any issues so far
Wooow Ubuntu didnt expect that huh...
Having a proprietary store ran by a single Company has nothing to do with Linuxes security model
This is the major reason why maintainers matter. Any method of software distribution that removes the maintainer is absolutely guaranteed to have malware. (Or if you don't consider 99% software on Google Play Store the App Store to be "malware", it's at the very least hostile to and exploitative of users). We need package maintainers.
The root of the problem i think is that the store is closed source, i don't think you will find a lot of people willing to work for a closed source store for some for profit company.
What do we learned today, kids?
No user control = more malicious possibilities of infecting/screwing up your PC.
If you're thinking prompts and permissions, that exists. PolKit handles all of that both on and outside the desktop. Many on servers may use sudo instead.
You don't have admin/root priveleges by default unless you're dumb enough to do sudo -i or login to the root user
This is the best summary I could come up with:
Stemming from reports of several fake crypto apps appearing in Canonical's Snap Store that aimed to steal user funds, temporary restrictions have been put in place while Canonical investigates the security matter.
A temporary manual review requirement has also been put in place on new Snap registrations.
This manual review is intended to thwart bad actors from registering names of legitimate applications (or at least legitimate sounding names) and using that as an avenue for pushing malicious Snaps to users.
"If you try to register a new snap while the requirement is active, you will be prompted to “request reserved name”.
Upon a successful manual review from the Snap Store staff, the name will be registered.
We want to thoroughly investigate this incident without introducing any noise into the system, and more importantly, we want to make sure our users have a safe and trusted experience with the Snap Store.
The original article contains 240 words, the summary contains 150 words. Saved 38%. I'm a bot and I'm open source!
good bot
That's a cute comment, but FYI it doesn't actually vote for the bot on Lemmy instances (yet?)
Bad bot
When will we learn? (Drew DeVault, May 2022)
This isn't even the first such incident with snap. https://github.com/canonical/snapcraft.io/issues/651
And from "Ubuntu Software" I don't see a way to report a suspected app.
Ah hahaha! Take that Canonical and your stupid snap store!
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0