Open Source

31143 readers

216 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago

MODERATORS

[email protected]

Why is Trilium so unknown? (github.com)

submitted 1 year ago by [email protected] to c/[email protected]

67 comments fedilink hide all child comments

I mean Trilium is fantastic app, lots of potential but the developer is struggling on his own, maybe it's because it's younger than logseq or maybe because is open source compared to obsidian. I think it's the best note-taking/knowledge-base/second-brain i know it virtually could link everything you posses toghter to create a gigantic wiki, so much potential. Plus it has its own self hostable syncing server and web app. Guys give it a look and tell me what you think

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 0 points 1 year ago* (last edited 1 year ago) (9 children)

Ah, if it's only available on flatpaks, that's why few people know about it.

Flatpak is a very insecure method to download software BTW, you probably should avoid it

Edit: It's curious that I'm getting downvoted for stating a fact. It seems a lot of flatpak users don't understand security. But that's kinda the point: even the flatpak developers don't understand the difference between integrity and authenticity

https://github.com/flatpak/flatpak-builder/issues/435

Flatpak currently does not provide authenticity, and one developer made it clear that he doesn't understand why that matters in the above ticket that requested signatures of packages back in 2016. It's been 7 years and still they haven't fixed this. I don't think the flatpak team understands or cares about security.

[–] [email protected] 1 points 1 year ago (2 children)

I don't think it is, I remember something like rpm, but im really new to Linux.

Why is that? Could you elaborate further? you peaked my interest.

[–] [email protected] 1 points 1 year ago (1 children)

Cryptographic signatures of releases are not required for all packages in flatpaks. They are for packages installed in apt.

[–] [email protected] 2 points 1 year ago

Thanks for the heads up man, appreciate it.

load more comments (6 replies)