cm0002@lemdro.id to Linux@programming.devEnglish · 3 days agoSignal AppImage now officially available for Linuxaboutsignal.comexternal-linkmessage-square24linkfedilinkarrow-up1149arrow-down12
arrow-up1147arrow-down1external-linkSignal AppImage now officially available for Linuxaboutsignal.comcm0002@lemdro.id to Linux@programming.devEnglish · 3 days agomessage-square24linkfedilink
minus-squareKSP Atlas@sopuli.xyzlinkfedilinkarrow-up21·3 days agoIMO flatpaks are a better option, appimages are just bringing people back to the insecure “find it on a website and download it” method of package management This is also one of the reasons why I dislike curl sh
minus-squarelukalix98@programming.devlinkfedilinkarrow-up6·3 days agoFlatpaks can be unsafe too though.
minus-squareAudaciousArmadillo@piefed.blahaj.zonelinkfedilinkEnglisharrow-up7·2 days agoSame goes for .debs from Debian stable. There is no absolute safety. But downloading unsigned code from a random website is far down the safe list.
minus-squarespectrums_coherence@piefed.sociallinkfedilinkEnglisharrow-up5·edit-22 days agoAppImage defended and used grossly outdated core component like FUSE2 for a long time, and comes with zero sandboxing by default. IMO, flatpak needs to improve in terms of security, but it is a strict improvement over AppImage.
minus-squareMarija_@programming.devlinkfedilinkarrow-up2·2 days agoI still prefer repositories, but official AppImages beat unofficial downloads.
IMO flatpaks are a better option, appimages are just bringing people back to the insecure “find it on a website and download it” method of package management
This is also one of the reasons why I dislike curl sh
Flatpaks can be unsafe too though.
Same goes for .debs from Debian stable. There is no absolute safety. But downloading unsigned code from a random website is far down the safe list.
AppImage defended and used grossly outdated core component like FUSE2 for a long time, and comes with zero sandboxing by default.
IMO, flatpak needs to improve in terms of security, but it is a strict improvement over AppImage.
I still prefer repositories, but official AppImages beat unofficial downloads.