4
Why is Trilium so unknown?
(github.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 23 Jun 2023
4 points (83.3% liked)
Open Source
31181 readers
172 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
- !libre_culture@lemmy.ml
- !libre_software@lemmy.ml
- !libre_hardware@lemmy.ml
- !linux@lemmy.ml
- !technology@lemmy.ml
Community icon from opensource.org, but we are not affiliated with them.
founded 5 years ago
MODERATORS
Ah, if it's only available on flatpaks, that's why few people know about it.
Flatpak is a very insecure method to download software BTW, you probably should avoid it
Edit: It's curious that I'm getting downvoted for stating a fact. It seems a lot of flatpak users don't understand security. But that's kinda the point: even the flatpak developers don't understand the difference between integrity and authenticity
Flatpak currently does not provide authenticity, and one developer made it clear that he doesn't understand why that matters in the above ticket that requested signatures of packages back in 2016. It's been 7 years and still they haven't fixed this. I don't think the flatpak team understands or cares about security.
Flatpaks aren't any less secure than any other installation option, where did you get that idea from?
This is misinformation. Flatpaks are far less secure than installing from apt. All packages installed from apt are cryptographically signed. This isn't the case with flatpaks.