Malware found in the Ubuntu Snap Store

[crosscourt]

Another reason why Im not a fan of Snap or similar as anyone can upload apps but whos guarding the gate?

www.lxer.com/module/newswire/ext_link.php?rid=255782

[tlmiller]

I saw that article, but haven't gotten a chance to actually read it. Interesting, and yeah, the whole point of having your own store is to make sure that whatever gets in there is vetted to be safe. Otherwise you've defeated the point.

[dai_trying]

I also read that the snaps involved were uploaded as proprietary and so no source was available to check (even if they did [which they don't])

[crosscourt]

Thats correct they were uploaded as proprietary and I may have more details for you as my regular site is doing a large article on this situation.

They removed that authors uploads at this point but something has to be done.

[dai_trying]

They removed that authors uploads at this point but something has to be done.

Yes, otherwise it will open the doors to all sorts of problems, or it could even see the end of snaps (in their current form at least) until they put the resource in place to monitor the actual code that goes into their repositories.

I would suspect much damage has already been done as many Linux users (myself included) will not use snaps because of this.

[crosscourt]

Even before this I have no desire to use Snaps or similar.

[tlmiller]

I don't have any desire to use them, but wouldn't mind seeing ONE of them become a "standard" that all distro's supported. I would love if we could have a day when everything is released in a format that would work on any distro as easily as Windows programs install. In theory, it would eliminate the main reason most companies give for not being willing to develop games for linux.

[crosscourt]

Given that more games today are being played online/streamed I doubt that will matter. Consoles will eventually become tv boxes and also have specific offerings for streaming. Streaming allows computers with lower hardware specs to still be able to play games very well and fairly cheaply and on laptop/portable devices.

[crosscourt]

Heres a full article on what you need to know about this situation,

https://itsfoss.com/snapstore-cryptocurrency-saga/

[crosscourt]

Some of the comments in that article, concerned me. I see this as a clear cut malware event where someone wanted to make some cash and lame excuses about using it to fund his apps just dont fly.