undefined | Better HN

0 pointsprmoustache2y ago0 comments

> Okay then, as you criticize Flatpaks give us your alternative to a trusted application.

I am not criticizing, I am saying it is mostly a moot point. The sandboxing allow a bit of isolation but this it ranks quite poorly in term of actual security benefits for the typical end users use cases.

> Nobody made this claim.

Well, not the authors of flatpak, but yes some did. On medias that many people watch such as youtube videos.

0 comments

Timber-65392y ago

> The sandboxing allow a bit of isolation but this it ranks quite poorly in term of actual security benefits for the typical end users use cases.

Ranked poorly in what checklist?

> Well, not the authors of flatpak, but yes some did. On medias that many people watch such as youtube videos.

Let's try to stay on topic. The point I made was that, the author's example about Flatpak GIMP doing something unauthorized on your system applies to any package format. The differentiating factor here is that Flatpak/Flatseal allows you to sandbox the application easily and quite effectively if I may add.

prmoustacheOP2y ago

yes and the point I made that usually when you are using most applications that aren't fetching content from the internet, this is to work on your data, so you have to give those applications access to your data and thus if the app is malicious it can do stuff on your data. Worse is if your application needs local files and internet access, said app can exfiltrate your data, receive payload and the fact it is sandboxed to a subset of your data doesn't change a lot compared to a non sandboxed app if this is data you cannot allow to be stolen/modified/ransomwared.

Sandboxing can limit a bit the attack surface / scenarios, but that's it.

j / k navigate · click thread line to collapse