mr_MADAFAKA@lemmy.ml to Linux@lemmy.ml · 2 年前Flathub now marks unverified appslemmy.mlimagemessage-square67linkfedilinkarrow-up1434arrow-down17
arrow-up1427arrow-down1imageFlathub now marks unverified appslemmy.mlmr_MADAFAKA@lemmy.ml to Linux@lemmy.ml · 2 年前message-square67linkfedilink
minus-squarePantherina@feddit.delinkfedilinkarrow-up12·2 年前If you create malware and publish it on flathub, you are the upstream dev. But for sure it helps against duplicate scams.
minus-squaredsemy@lemm.eedeleted by creatorlinkfedilinkEnglisharrow-up24·2 年前I can’t find it now, but I read that the verification process also includes human review (for the initial verification, not every update), so it should actually prevent “verified” malware (though it does nothing against unverified malware). Edit: Here’s an article with this and more info: https://lwn.net/SubscriberLink/966187/3ef48792e5e8c71d/
minus-squarePantherina@feddit.delinkfedilinkarrow-up5·2 年前Nice! Add flathub with --subset=verified and get apps you really need from their .flatpakref files
If you create malware and publish it on flathub, you are the upstream dev. But for sure it helps against duplicate scams.
I can’t find it now, but I read that the verification process also includes human review (for the initial verification, not every update), so it should actually prevent “verified” malware (though it does nothing against unverified malware).
Edit: Here’s an article with this and more info: https://lwn.net/SubscriberLink/966187/3ef48792e5e8c71d/
Nice!
Add flathub with
--subset=verifiedand get apps you really need from their .flatpakref files