Oh Snap! Canonical now doing manual reviews for new packages due to scam apps

wanst that the whole damn (stated) point of making it proprietary?

I can recommend a minty flavored alternative if you're sick of it.

It always takes a disaster before corporations act.

Snap still has users?

Why just now? Meanwhile, all Debian packages on their apt repos are reviewed and maintained by Debian.

I've heard all the arguments about how these new packaging formats are supposed to make things easy for developers and for users with different use cases than my own (apparently), but I will continue to avoid them until they have further matured. I'm relieved that this is still possible.

How is that not a security theater? , you just need to :

• publish a good snap
• change it to malware after it is approved
• profit

The extra cost added to override this is fairly small, i don't think it will help.

Maybe adding a proprietary *layer to an open-source OS was a bad idea (for end users)?

Only took them 6 years of malware

I have this unpopular thought: If I had to choose between Canonical's Snap Store and Apple App Store...

This is the best summary I could come up with:

After repeatedly suffering issues with scam apps making it onto the Snap Store, Canonical maker of Ubuntu Linux have now decided to manually look over submissions.

I've covered the issues with the Snap Store a few times now like on March 19th when ten scam crypto apps appeared, got taken down and then reappeared under a different publisher.

Also earlier back in February there was an issue where a user actually lost their wallet as a result of a fake app.

Multiple fake apps were also put up back in October last year as well, so it was a repeating issue that really needed dealing with properly.

So to try and do something about it, Canonical's Holly Hall has posted on their Discourse forum about how "The Store team and other engineering teams within Canonical have been continuously monitoring new snaps that are being registered, to detect potentially malicious actors" and that they will now do manual reviews whenever people try to register "a new snap name".

Hopefully this will begin to put an end to scam apps making it into the Snap Store and onto machines running Ubuntu and any other Linux distribution that enables Snap packages.

The original article contains 238 words, the summary contains 195 words. Saved 18%. I'm a bot and I'm open source!

They should have been doing this from the start.

Just remove the crypto bullshit apps and 99% of the problems will go away.

And maybe release the SnapStore code so they can all scam each other over there.

I'm glad to see that teststeve5 passed the test!

Can you use snaps with autofs/NFS yet?

Then I'll be on the last deb until it no longer works. I'm not going down the proprietary snap route.

Maybe it's just me, but I doubt this will be very effective.