salvate il soldato Ryan

[caturen]

Flatpak verification is extremely important

In Linux Mint, is it safe to open up the Software Manager and install Google Chrome? Yes? No? Well.. it depends, and it has nothing to do with how much you trust Linux Mint, or Google.

You need to trust Ryan Gonzalez because it isn’t Mint or Google which updates the Flatpak for Chrome, it’s Ryan.

Now as it happens, Ryan’s a very nice developer. The problem isn’t Ryan. The problem is that amongst the 6 million people who installed his Flatpak, very few people know who Ryan is.

In Flathub, a verified app is an app that is published by its original developer or a third party approved by the developer. Chrome is published by Ryan and is therefore “unverified”.

https://blog.linuxmint.com/?p=4675

[woddy68]

Siamo sempre lì, di qualcuno ti devi pur fidare, se installi chromium dai repository ufficiali, ti devi comunque fidare della distribuzione e del maintainer del pacchetto, di cui tra l'altro manco si sa chi sia di solito.
XZ insegna...

[Ubuntello]

We’ll update the Software Manager to not show unverified Flatpaks by default. This will be an opt-in.

Mi sembra un'ottima idea.