Posts: 31,445
Joined: Jan 2011
(2016-04-26, 00:54)J876 Wrote: (2016-04-25, 09:22)fritsch Wrote: The insane nightmare here is rather: Vendors package their software with all libs included in a snap container. Now there is a security bug discovered in one of those libs ... the vendor stops caring (cause he had to redo the complete snap package), but keeps it as is - cause "it works ™" ... this will be huge security nightmare for every administrator that needs to make sure a secure system :-(
Absolutely correct.
You guys do realize that this is what Kodi does on Windows (more or less), OS X, iOS, Android, etc? The world has not caught on fire there (in relation to Kodi). Let's not pretend that HTPCs are in the same category as a production environment server or some business critical device. A single bundle might not be perfect, but it's often better than the alternative (people never upgrading anything because they have an older system/hardware/whatever).
Plus, Kodi has some existing and well documented security flaws right now, in Kodi itself, that have no near term fix. If security is an argument in this discussion then it doesn't matter. Any version of Kodi is already insecure.
@
qp9013625 please stop talking. Any good concepts/situations/arguments for snap will be killed for Kodi because you are being a dick about the whole thing. You are hurting your own argument/goal.
Posts: 23,499
Joined: Aug 2011
Reputation:
1,103
fritsch
Team-Kodi Developer
Posts: 23,499
2016-04-26, 06:47
(This post was last modified: 2016-04-26, 06:48 by fritsch.)
Yeah - it is done on windows, android and others cause of the retarted system policies - no global package manager, no chance to build against system libs :-( huge blobs with bugs are the result.
I think you still know how unbelievably hard it is to build the toolchain for windows and how much pain is involved to get packages bumped and compiled.
First decide what functions / features you expect from a system. Then decide for the hardware. Don't waste your money on crap.
Posts: 31,445
Joined: Jan 2011
My comment was not about how hard or easy it is. I don't know what a toolchain is or how to compile (outside of following cut and paste directions). My comment was in reply to the claim that it would be a security issue. I have never had a security issue with bundled libraries for Kodi on OS X, Windows, iOS, or Android. (or even Xbox).
If the reason to not do this is because it's too much of a support burden, or if no one wants to, that's fine. However, the security argument and the binary size argument are silly. We have 10 years worth of data that show security (of bundled libraries) has never been an issue. (On the other hand, Kodi-specific code does have some know security issues, but they're honestly not majorly concerning due to the nature of media centers).
That being said, I honestly don't care if this snap is used or not. I don't think it would be a big deal for most Kodi users, as most of them would be better served using a packaging system for Kodi. I like packaging systems and do think they are a better delivery system for such things, At the same time, I don't think it's fair to claim that there would be a realistic security concern, in context to Kodi ;)
Posts: 23,499
Joined: Aug 2011
Reputation:
1,103
fritsch
Team-Kodi Developer
Posts: 23,499
For now I only posted arguments and asked questions. None of the questions was answered and also that guy did not even lift a finger to prove his ideas, just a fully demanding attitude while not being aware of technical difficulties and not being able to solve the questions raised, but instead he posted some pictures, perhaps he should become an artist instead.
First decide what functions / features you expect from a system. Then decide for the hardware. Don't waste your money on crap.
Posts: 31,445
Joined: Jan 2011
2016-04-29, 07:04
(This post was last modified: 2016-04-29, 07:05 by Ned Scott.)
@
qp9013625
It really is a technical issue. One release for XBMC (this was a few years ago) almost didn't include a binary from the PPA because of a lack of manpower. Thankfully, someone was found to take that over. If Mac OS or Windows lost all their developers then you would probably see those platforms no longer supported as well.
If someone wants something and the manpower is there, then it will be given fair consideration.
Posts: 1,625
Joined: Sep 2007
Reputation:
28
keith
Team-Kodi Member
Posts: 1,625
You feel so entitled you can tell others to do stuff? Why don't you try to do something yourself, instead of complaining others aren't doing what you want them too?
