Linux Mint downloads (briefly) compromised
Linux Mint downloads (briefly) compromised
Posted Feb 21, 2016 21:21 UTC (Sun) by glaubitz (subscriber, #96452)In reply to: Linux Mint downloads (briefly) compromised by flussence
Parent article: Linux Mint downloads (briefly) compromised
> The root cause of that issue is that they've built their distro atop one that doesn't namespace packages sanely (or at all). Debian also has had the same dilemma internally with ack, chromium, dolphin, etc. but they choose to work around it by changing the name, sometimes the binary, of one of the two programs; the end result is that the one on the losing side of the deal ends up harder to find.
Well, yes, but is there any distribution out there which supports multiple namespaces? I'm not aware of any.
> Everything else you've said is valid, but this one is squarely Debian's fault.
I think that's arguable. You cannot blame Debian when Mint decides to re-use the name of existing packages and deliberately runs into such conflicts. I mean, yes, we have had conflicts in Debian with packages like "node" vs. "nodejs" and so on, but we actually resolved them and did not leave them as-is and let just the user run into them.
FWIW, one could as well blame the upstream projects for using conflicting names for their projects.
Adrian