Live data from Hacker News

Flatpak – Standalone Apps for Linux

flatpak.org

1–10 of 46 posts

Re: Flatpak – Standalone Apps for Linux

#2
I'm not at all sold on this idea of "platform" vs "application" that seems to have become so common. I'd much rather have a Nix-like system, where you still get the isolation benefits (each package specifies an exact dependency hierarchy), while also opportunistically sharing stuff that is identical between packages.

Re: Flatpak – Standalone Apps for Linux

#3
* Is Flatpak the same as xdg-app? Yes, while xdg-app was a fine name to use during development we wanted something with wider appeal and more sparkle to it than xdg-app could provide. So as part of formally launching Flatpak as ready for use we decided to pick a more accessible and fun name.*

Interesting - I wonder how it compares with Click packages.

Re: Flatpak – Standalone Apps for Linux

#8

Embedded libraries that never get updated. That may expose security vulnerabilities. Different apps including those different versions of libraries. No. That's not progress. That's ridiculous.

Fortunately it also sandboxes apps so that most of those vulnerabilities will be moot. But yeah, there's now a market for Flatpak image scanning. :-/

Re: Flatpak – Standalone Apps for Linux

#9
post #8

Embedded libraries that never get updated. That may expose security vulnerabilities. Different apps including those different versions of libraries. No. That's not progress. That's ridiculous.

Fortunately it also sandboxes apps so that most of those vulnerabilities will be moot. But yeah, there's now a market for Flatpak image scanning. :-/

Just means whoever targets those exploits also have to account for breaking out of the sandbox.

Re: Flatpak – Standalone Apps for Linux

#10

* Is Flatpak the same as xdg-app? Yes, while xdg-app was a fine name to use during development we wanted something with wider appeal and more sparkle to it than xdg-app could provide. So as part of formally launching Flatpak as ready for use we decided to pick a more accessible and fun name.* Interesting - I wonder how it compares with Click packages.

Same idea, different implementation. And guess who gets yelled at for NIH-ing...
Post reply on HN