• wiki_me@lemmy.ml
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    How is that not a security theater? , you just need to :

    • publish a good snap
    • change it to malware after it is approved
    • profit

    The extra cost added to override this is fairly small, i don’t think it will help.

    • progandy@feddit.de
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      At least this prevents impersonation of well-known publishers or their software. Maybe all changes to metadata like the description should require a manual review even for established packages.

      • wiki_me@lemmy.ml
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        At least this prevents impersonation of well-known publishers or their software

        how?

        • progandy@feddit.de
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          1 year ago

          That depends on the depth of the review, e.g. verifying the submitter is a member of the project, the software name does not conflict with a well known name,…