KSPAtlas comments on Signal AppImage now officially available for Linux

[–] KSPAtlas@sopuli.xyz 21 points 4 months ago (4 children)

IMO flatpaks are a better option, appimages are just bringing people back to the insecure "find it on a website and download it" method of package management

This is also one of the reasons why I dislike curl sh

permalink

fedilink

source

parent

hideshow 4 child comments

[–] lukalix98@programming.dev 7 points 4 months ago (3 children)

Flatpaks can be unsafe too though.

permalink

fedilink

source

parent

hideshow 3 child comments

[–] AudaciousArmadillo@piefed.blahaj.zone 7 points 4 months ago

Same goes for .debs from Debian stable. There is no absolute safety. But downloading unsigned code from a random website is far down the safe list.

permalink

fedilink

source

parent

[–] spectrums_coherence@piefed.social 5 points 4 months ago* (last edited 4 months ago)

AppImage defended and used grossly outdated core component like FUSE2 for a long time, and comes with zero sandboxing by default.

IMO, flatpak needs to improve in terms of security, but it is a strict improvement over AppImage.

permalink

fedilink

source

parent

[–] Marija_@programming.dev 3 points 4 months ago

I still prefer repositories, but official AppImages beat unofficial downloads.

permalink

fedilink

source

parent