Skip to main content

mastodon - Link to source

Good News, Everyone!
Canonical has implemented one of my suggestions after the recent crypto scam issue in the Snap Store. This is excellent progress and should be applauded. 👏

forum.snapcraft.io/t/manual-re…

#ubuntu #linux #snapcraft

A snapshot from my blog post a month back. The second bullet point is highlighted What I think Canonical should do urgently These suggestions are to reduce the opportunity for a bad actor to publish a similar scam application. * Mandate & verify that all published applications using financial and/or cryptocurrency branding are officially published directly by the upstream developers * Change the store so all initial Snapcraft store name registrations are gated behind human review Gate the first month of a new snap uploads behind human review * Block all interface connection requests behind a human review, including automatically connected ones like network and home * Fully staff the team doing the above to respond to registration, interface connection and upload requests in a timely fashion * Send out a clean snap update (as we did in 2018) to all clients that have the scam snaps still installed

Manual review of all new snap name registrations

Over the recent weeks, the Snap Store has been under attack by various publishers attempting to upload malicious crypto-wallet snaps.
snapcraft.io
#linux #ubuntu #snapcraft
Unknown parent

Brodie Robertson
mastodon - Link to source
Brodie Robertson
• •
People never read instructions to begin with, why do you think self serve checkouts need people there guiding users how to use them. It's easy to assume that everyone else has the same knowledge base that you do but that's often not the case if you're an experienced user
This entry was edited (1 year ago)

Lo, thar be cookies on this site to keep track of your login. By clicking 'okay', you are CONSENTING to this.

⇧