Distributors entering Flatpakland [LWN.net]

Distributors entering Flatpakland

Posted Jul 9, 2022 13:15 UTC (Sat) by jafd (subscriber, #129642)
In reply to: Distributors entering Flatpakland by khim
Parent article: Distributors entering Flatpakland

Y’know, I can make a contraption with my ALSA/Pipewire even now. It’s going to be pretty much indistinguishable. But it’s a lot of time poured into it that doesn’t quite scale.

Applications that try to invoke things like machine learning or escape the sandbox to make sure I’m giving them a real mic should burn in hell anyway, no one ever does it for a good reason.

to post comments

Distributors entering Flatpakland

Posted Jul 9, 2022 13:52 UTC (Sat) by Wol (subscriber, #4433) [Link] (3 responses)

In GooglePlay land, it should be behaviour that gets you banned. If you don't need a mic, then don't demand it ...

imho, an app demanding mic access when it doesn't need it is pretty much the definition of nefarious ... it would get it deleted from my system instantly.

Cheers,
Wol

Distributors entering Flatpakland

Posted Jul 9, 2022 15:22 UTC (Sat) by jafd (subscriber, #129642) [Link] (2 responses)

Even if it needs the mic for its purported function, once the access is granted, it’s a free-for-all. How sure can I be that it’s only using my mic when I want it to? That it’s not snooping behind my back? How can I be sure that it’s using the mic I want it to use, provided I have more than one (we’re talking about general-purpose computers here, not phones)? Can I revoke the access after having placed the call?

So many questions here, really.

You may argue, „but with regular .deb or .rpm, an unrestricted app may use anything and everything and not have to ask you!”

Yes. I am aware of this. But this is beside the point.

I’m using software that overwhelmingly doesn’t do any of these things. I have sources I can trust from which I obtain the software. I’m not the one who started the conversation about how the world is full of crooks who invade my privacy with keyloggers, screenshots, webcam access, microphone access, and who knows what else, and how our lord and saviour App Store^W^WFlatpak is going to save us from all of this suffering because they have sandboxing and permissions.

Sigh. They bring up the topic, the onus is on them to show how real good they are.

And if the single point of flatpak (and the one which it sort of delivers) is to remove a layer of package maintainers and let software publishers rule the game, just be upfront about it. No need to go into the domain of fairy tales about how my hair is going to grow silky smooth once I accept flatpak on my systems.

Distributors entering Flatpakland

Posted Jul 9, 2022 21:05 UTC (Sat) by roc (subscriber, #30627) [Link] (1 responses)

In latest Android, when an application is using the microphone there is a visual indication in the status area (a green dot).

When you check the device privacy settings there is a section listing the applications that have used the microphone in the last 24 hours. There is also a master switch there to stop all applications from using the microphone, temporarily.

Android also automatically revokes permissions from apps you haven't used for more than a month.

It's a pretty robust setup, all things considered.

Distributors entering Flatpakland

Posted Jul 10, 2022 17:57 UTC (Sun) by smurf (subscriber, #17840) [Link]

> It's a pretty robust setup, all things considered.

Well, it has become a pretty robust system over the last fifteen years. At first, not so much.

It'd be nice if the Flatpak-and-whatnot people would learn from, and possibly improve upon, the solution(s) Android came up with.