frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Flatpak – An Insecurity Nightmare

https://oro.gay/posts/flatpak-an-insecurity-nightmare/
16•jannesan•2h ago

Comments

philips•49m ago
If the author is reading the sidebar covers all content on my iPhone 13
aucisson_masque•45m ago
Same, just scroll and it dismiss it.
aucisson_masque•38m ago
I don’t think the issue is really that api aren’t mature enough or that some developers refuse to use flatpak sandboxing correctly and instead use static permissions.

Linux, Unix and most computers were designed from the ground up as open system where everything can access everything.

It’s absolutely not secure, but that’s not what flatpak is supposed to fix.

Flatpak is supposed to make installations of apps easier by sharing common dependencies across all distributions. That’s all. And in a way, it works.

It has downside even on that, people who have slow internet connection will require hours to download a simple calculator app whereas it took a few seconds before, but it works.

Now on the sandboxing part, you can’t fix a sinking ship with a chewing gum in the hole. The whole structure is not designed to work this way.

It has to come from yet another distribution where permission are enforced at the operating system level, like on macOS. It’s a lot of work, and then you got to get developers on board, so it will never happen and it’s fine. Linux is not macOS, it doesn’t have a trillion dollar company backing it up and it’s not unified.

You got to play with your strength, not your weaknesses.

jauntywundrkind•24m ago
I wish I could care less about Flatpak. But they inject themselves into every protocol discussion on Wayland and loudly insist only the flatpak solution is acceptable. That we have to keep using their dbus or whatever they do thinh. They drove off a xfce maintainer in record time who was just trying to discuss how to help their users, with terrible behavior. https://gitlab.freedesktop.org/wayland/wayland-protocols/-/m...

Everyone else is getting off dbus, is working to let the compositor have power, have authority. Dbus is this other system that has some security options but that rarely is well locked down.

And it's just wild to me that there's such ongoing protest against using Wayland protocol development that's so insistent, and it's especially annoying and frustrating seeing it from biased folk like Flatpak who want to make sure there is no discrete source of authority, who want to make sure they can own a chunk of the UX. DBus and their protocols make sure Wayland doesn't become the one way to run a good desktop, that you have to keep having multiple totally different messaging systems going. Fine, I don't begrudge you that as an option, but don't keep road blocking those who want to develop Wayland, please!

Rabbits were a medieval royal luxury in England until the Black Death

https://phys.org/news/2026-10-rabbits-medieval-royal-luxury-england.html
49•samizdis•1d ago•24 comments

Hybrid Reasoning Agents: LLM agents that think in latent space, act through text

https://arxiv.org/abs/2610.18861
349•allinonai•10h ago•167 comments

William Gibson and the trademarking of cyberspace

https://colo.to/cyberspace.html
154•Eric_Gullichsen•7h ago•47 comments

There's never been a better time to go into math (by: 3blue1brown) [video]

https://www.youtube.com/watch?v=LKrwhjOI8Nc
317•mdp2021•1d ago•375 comments

Superlite: A Faster Alternatie to Superpowers

https://contextfirst.blog/superlite-hand-an-agent-a-spec/
66•iheatuchriswogu•5h ago•29 comments

If you don't run your own LLM proxy, how do you know whats going on?

https://jrdsgl.com/if-you-dont-run-your-own-llm-proxy-how-the-fuck-do-you-even-know-whats-going-on/
123•amrrs•10h ago•82 comments

Laptop Based on 6502 CPU

https://www.maddox.pro/?p=448
101•nanochess•3d ago•37 comments

Someone behind the software

https://karrisaarinen.com/posts/someone-behind-the-software/
409•tosh•14h ago•158 comments

Verisign .com Domain Name Registry Consumer Class Action

https://www.hbsslaw.com/cases/verisign-com-domain-name-registry-consumer-class-action
65•greyface-•2h ago•22 comments

Dogs seem to agree with humans that 'bouba' is round and 'kiki' is spiky

https://www.sciencealert.com/dogs-seem-to-agree-with-humans-that-bouba-is-round-and-kiki-is-spiky
198•gmays•1d ago•123 comments

RepRapMicron

https://github.com/VikOlliver/RepRapMicron/wiki
376•RobotToaster•17h ago•58 comments

Free Pascal compiler now supports dynamic packages

https://www.getlazarus.org/dynamic/
151•sysrpl•12h ago•36 comments

The DNS Museum

https://dns.museum
52•zdw•2d ago•7 comments

DeepSeek V4.1 Flash 1017 (Max)

https://artificialanalysis.ai/models/deepseek-v4-1-flash-1017
106•theanonymousone•2h ago•34 comments

How Postgres DELETE can actually scale

https://www.dbos.dev/blog/scaling-deletions-in-postgres
8•KraftyOne•3d ago•0 comments

Tmux and Claude Code: Sessions, Send-Keys, and the Ceiling

https://crystl.dev/guides/tmux-for-ai-agents/
4•ankitg12•1h ago•0 comments

Show HN: WhatsApp MCP running free on Cloudflare

https://github.com/finereli/whatsapp-mcp
86•zoozla•9h ago•46 comments

I built a programming language that LLMs can't use

https://blog.picheta.me/post/killswitch-lang/
159•dom96•1d ago•111 comments

PalmOS Lemmings

https://github.com/ardiri/palmos-lemmings
118•memalign•13h ago•26 comments

One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux

https://quentinkaiser.be/security/2026/10/16/one-parser-two-bugs/
72•zoobab•2d ago•15 comments

Java sealed classes and exhaustive pattern matching

https://neilmadden.blog/2026/04/24/java-sealed-classes-and-exhaustive-pattern-matching/
161•hnisjafx40•16h ago•114 comments

Flatpak – An Insecurity Nightmare

https://oro.gay/posts/flatpak-an-insecurity-nightmare/
16•jannesan•2h ago•4 comments

A new way to think about borrow checking (in reverse)

https://verdagon.dev/blog/reverse-borrow-checking
63•verdagon•19h ago•5 comments

Footage of the Flock search that a judge ruled was uncosntitutional

https://www.404media.co/watch-footage-of-the-flock-search-a-judge-ruled-unconstitutional/
89•anigbrowl•5h ago•33 comments

"I'm on a war footing": Terry Tao and the crisis in math

https://www.nytimes.com/2026/10/16/us/math-ai-terence-tao.html
157•vinipolicena•2d ago•288 comments

16-bit fully functional DIY magnetic core memory

https://www.youtube.com/watch?v=OJ1WYyO2jdY
57•oliculipolicula•4d ago•18 comments

Sanity's Edge – A voice BBS from 1994

https://sanitys-edge.shouden.us
21•indigodaddy•6h ago•1 comments

Open MicroManipulator – A sub-micrometer 3D motion control plattform

https://github.com/0x23/MicroManipulatorStepper
191•_Microft•20h ago•16 comments

Namecheap just seized and disabled all my domains

https://www.reddit.com/r/sysadmin/comments/1x8cycd/namecheap_just_seized_and_disabled_all_my_doma...
550•sashk•14h ago•286 comments

The Intel 8087 chip: floating-point addition and subtraction

https://www.righto.com/2026/10/8087-addition-subtraction-microcode.html
101•pwg•15h ago•33 comments