• Pantherina@feddit.de
      14·
      9 months ago

      Flathub is doing more and more, but stuff like hiding --subset=verified is very bad.

      They simply need to gain critical mass until they can force changes like portals etc.

    • Pantherina@feddit.de
      12·
      9 months ago

      If you create malware and publish it on flathub, you are the upstream dev. But for sure it helps against duplicate scams.

    • Billegh@lemmy.world
      61·
      9 months ago

      Because both Red Hat and Canonical are of the “pay us to care” mindset. If you aren’t paying for support, you’re a freeloader and need to do your own research.

      • TheGrandNagus@lemmy.worldEnglish
        2·
        9 months ago

        I mean, that’s pretty much all open source software and isn’t specific at all to RH/Canonical.

        What’s provided to you is provided without warranty and you’re not automatically entitled to support, etc.

        • Billegh@lemmy.world
          1·
          9 months ago

          That’s not entirely true with Red Hat. There’s a lot of work that they’ve done in the open source community that they haven’t shared back. And canonical seems to think this is a good idea.

          • TheGrandNagus@lemmy.worldEnglish
            1·
            9 months ago

            I’m not really sure what you mean by that. What do you mean they’ve done a lot of work for the open source community that they haven’t shared back?

            And what does it have to do with providing software support free of charge?

    • pmk@lemmy.sdf.org
      5·
      9 months ago

      Fedora has their own flatpak repo built from their own rpms and their own runtime. Flathub has more flatpaks though.

    • thingsiplay@beehaw.org
      1·
      9 months ago

      This unverified badge does not prevent from malware being downloaded. This is a false statement! An upstream developer can have malicious intention and be verified as the upstream developer. This unverified badge only helps identifying its not a modified version by someone else and is guaranteed to be from the original developer. It does not prevent anyone from downloading and installing unverified apps. If that was the goal, then why having unverified apps in the first place on the store? Yes, because its useful. Therefore people will download unverified apps or just blindly trust verified apps.

      At the moment his is enough. But if the Flathub store grows, this can be an issue. Look at the Android and ios app stores; there are plenty of apps from original developers with malicious intentions.