Flatpak – a security nightmare

> Sadly, it's obvious Red Hat developers working on flatpak do not care about security, yet the self-proclaimed goal is to replace desktop application distribution - a cornerstone of linux security. Sheesh, while the issues raised are all valid, this does not actually justify such a conclusion about the intent of the Red Hat developers. Telling people what their side of the story is for them in a dismissive fashion like this is not going to make it more likely…

> A high severity CVE-2017-9780 (CVSS Score 7.2) has indeed been assigned to this vulnerability. Flatpak developers consider this a minor security issue. The actual wording in the linked release is "This is a minor security update, matching the behaviour on master where we avoid ever creating setuid files or world-writable directories." The wording is perhaps a little ambiguous, but my interpretation of that is, "this is a minor update that fixes a security issue," not "this is an update…

I don't get why people feel the need to make these unique domain names for a single blog post. This happened with 'chrome is bad'[0] where someone anonymously registered a new domain complaining about Chrome's updater taking up CPU, but the comments later pointed out that it most likely was just a bug in activity monitor[1]. It seems the only reason for doing this instead of having a personal site with multiple blog posts is to spark debate while keeping…