• 2 Posts
  • 14 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2023

help-circle


  • This is FUD. It definitely is not a “critical” security feature. Firefox flatpak can’t currently do its own internal sandboxing of subprocesses via namespaces, but it does do seccomp bpf filtering. That’s in addition to the standard sandboxing of flatpak itself, which is implemented using namespaces anyways.

    If you are extra paranoid, you can tweak the flatpak’s permissions to harden the sandboxing via your distro’s flatpak settings app.


  • Flatpaks are containerized, making them both more reliable and more secure (in general… but it’s always possible to fuck things up).

    Besides the benefits to users, there are also huge benefits to developers: they can publish a single package and support nearly every distro with it.

    It’s often impossible for a dev to publish and maintain packages for all Linux distros out there, so stuff on AUR is built and packaged by well-meaning, but random people who are not the original developer. This very often leads to the app having bugs and compatibility issues which the developer ends up wasting time debugging and trying to fix even though it’s not their fault. (although downstream packagers can fuck this up too by publishing their own unofficial Flatpaks, like Fedora’s recent OBS shenanigans)


  • I think it’d be less creepy if there was an easily accessible public dashboard displaying this telemetry. E.g. like counters showing how many people hide the bookmark bar. If you can instantly see what data your browser is sending in an easily digestible format (ie not a dump of JSON in a submenu), it’s easier to gain a quick understanding of the benefits vs minimal privacy tradeoffs.

    But it really depends on trust: trust that they’re not collecting more than they claim, and trust that the data is properly anonymized. Mozilla has lost that trust.







  • Why are you assuming that it is? Maybe it’s because I’m not a religious person, but I don’t see anything morally wrong with sex work. Whether someone is doing it against their will is a separate issue, but that’s not an assumption I’d make without other evidence.

    If you really are coming at this issue from a religious point of view, then there’s no point getting into a discussion here since I’m not going to change your mind on that (nor do I care to; believe what you want). Otherwise, I’m curious what your actual arguments might be.