Is it really an issue? Microsoft Windows has a "trust" system, but last I checked not even their own security patches get signed. No one uses it.<br><br><div><span class="gmail_quote">On 11/6/07, <b class="gmail_sendername">
François Cauwe</b> <<a href="mailto:francois@cauwe.org">francois@cauwe.org</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi all,<br><br>I was reading the discussion about the "Repository mess" and installing<br>new software. I have a security concern about the current approach of<br>the "1 click install".<br><br>If I'm a end user, I just want to install a certain software. In the
<br>current approach, this step is made really easy, which is _good_. It<br>automatically adds the needed repositories, and install the software.<br><br>BUT the current software installer assumes that the software can be<br>
trusted, that it won't delete my document or send my personal data to a<br>central server. (Actually it warns me first, but I'm used to warnings,<br>so I always click ok.)<br><br>The community repositories could partly solve this problem, because the
<br>software is checked by developers, and therefore we can hope it save to<br>install it. But for 'external' software and closed source software, we<br>can never be sure.<br><br>What is Maemo's long time approach to solve this problem? How do you
<br>assume that software is save? Of how do you treat 'untrusted' software?<br><br>The OLPC project has similar problems, but they have a interesting<br>approach to it: <a href="http://wiki.laptop.org/go/OLPC_Bitfrost">
http://wiki.laptop.org/go/OLPC_Bitfrost</a><br><br>François Cauwe<br><br><br><br>_______________________________________________<br>maemo-developers mailing list<br><a href="mailto:maemo-developers@maemo.org">maemo-developers@maemo.org
</a><br><a href="https://lists.maemo.org/mailman/listinfo/maemo-developers">https://lists.maemo.org/mailman/listinfo/maemo-developers</a><br></blockquote></div><br><br clear="all"><br>-- <br>Jesse Guardiani<br>Software Developer / Sys Admin
<br><a href="mailto:jesse@guardiani.us">jesse@guardiani.us</a>