💾 Archived View for bbs.geminispace.org › u › norayr › 14273 captured on 2024-05-10 at 12:08:57. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2024-03-21)
-=-=-=-=-=-=-
Re: "How do you install your Internet browsers?"
interesting.
i think i trust repository binaries much more than binaries from even mozilla.
on the number, i don't know what is their case, but i had to use wrong, and more up to date number recently for lagrange, in maemo-leste repos. because i was changing its cmakelists.txt file, and for the builder it is part of the original source. so when i realized i need to make more changes in that file, the builder refused, since then the fingerprint of the _orig package changed, while version didn't.
so i had to bump up version and i mentioned it in the commit or somewhere that that's a fake version which doesn't exist yet, but i had not other choice. well the choise was to be wiser, eh.
Jan 23 · 4 months ago
1. Download binaries and place them in a standard path for programs
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 8%
2. Download binaries and place them in a custom path
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 10%
3. Download installer pack
███▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 12%
4. Via repository
████████████▁▁▁▁▁▁▁▁▁▁▁▁ 50%
5. Via flatpak
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 8%
6. Via snap
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 5%
7. Via AppImage
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 3%
8. Download source and compile
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 3%
60 votes were cast.
i just have this general trust in repository software. i believe it is much much harder to have malicious code in them, than in, of course, let's say nodejs or rust repos. and in waterfox tar.gz binary files that i was downloading.
and sometimes, when i have no other choice than to try something binary, i try it from chroot, or at least from other user.
i became paranoid a little bit too much than it worth it, after using waterfox, and rebuilt every single package i had. though i only ran waterfox as user, but i thought, well, maybe it used some vulnerability to get root privileges and contaminate something in the system. well i realized that's not probable. but still rebuilt everything.
and if it contaminated the compiler - it would not save me anyway, since the contaminated compiler would compile malicious code in to newer binaries.
— see compiler backdoor section.
LibreWolf is apparently still not available on Ubuntu Jammy repositories (long-time Kubuntu user here), so I install the AppImages on my $HOME, sometimes also wrap them around "firejail --private=<dir> --appimage" for a bit of extra security.
🌧️ miragearchitect · Jan 25 at 06:57:
I add it to the nixos config...
"via repository" but sometimes that means manually adding repositories, not just the OS defaults
librewolf is surprisingly lightweight.
How do you install your Internet browsers?