💾 Archived View for bbs.geminispace.org › u › norayr › 14273 captured on 2024-08-31 at 14:14:56. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2024-08-18)
-=-=-=-=-=-=-
Re: "How do you install your Internet browsers?"
interesting.
i think i trust repository binaries much more than binaries from even mozilla.
on the number, i don't know what is their case, but i had to use wrong, and more up to date number recently for lagrange, in maemo-leste repos. because i was changing its cmakelists.txt file, and for the builder it is part of the original source. so when i realized i need to make more changes in that file, the builder refused, since then the fingerprint of the _orig package changed, while version didn't.
so i had to bump up version and i mentioned it in the commit or somewhere that that's a fake version which doesn't exist yet, but i had not other choice. well the choise was to be wiser, eh.
Jan 23 · 7 months ago
1. Download binaries and place them in a standard path for programs
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 8%
2. Download binaries and place them in a custom path
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 10%
3. Download installer pack
███▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 12%
4. Via repository
████████████▁▁▁▁▁▁▁▁▁▁▁▁ 50%
5. Via flatpak
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 8%
6. Via snap
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 5%
7. Via AppImage
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 3%
8. Download source and compile
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 3%
60 votes were cast.
🐙 norayr · 2024-01-23 at 11:36:
i just have this general trust in repository software. i believe it is much much harder to have malicious code in them, than in, of course, let's say nodejs or rust repos. and in waterfox tar.gz binary files that i was downloading.
and sometimes, when i have no other choice than to try something binary, i try it from chroot, or at least from other user.
i became paranoid a little bit too much than it worth it, after using waterfox, and rebuilt every single package i had. though i only ran waterfox as user, but i thought, well, maybe it used some vulnerability to get root privileges and contaminate something in the system. well i realized that's not probable. but still rebuilt everything.
🐙 norayr · 2024-01-23 at 13:06:
and if it contaminated the compiler - it would not save me anyway, since the contaminated compiler would compile malicious code in to newer binaries.
— see compiler backdoor section.
LibreWolf is apparently still not available on Ubuntu Jammy repositories (long-time Kubuntu user here), so I install the AppImages on my $HOME, sometimes also wrap them around "firejail --private=<dir> --appimage" for a bit of extra security.
🌧️ miragearchitect · 2024-01-25 at 06:57:
I add it to the nixos config...
📷 sjlxndr · 2024-01-25 at 17:48:
"via repository" but sometimes that means manually adding repositories, not just the OS defaults
🐙 norayr · 2024-01-30 at 01:00:
librewolf is surprisingly lightweight.
How do you install your Internet browsers?