After repeatedly suffering issues with scam apps making it onto the Snap Store, Canonical maker of Ubuntu Linux have now decided to manually look over submissions.
I've covered the issues with the Snap Store a few times now like on March 19th when ten scam crypto apps appeared, got taken down and then reappeared under a different publisher. Also earlier back in February there was an issue where a user actually lost their wallet as a result of a fake app. Multiple fake apps were also put up back in October last year as well, so it was a repeating issue that really needed dealing with properly.
So to try and do something about it, Canonical's Holly Hall has posted on their Discourse forum about how "The Store team and other engineering teams within Canonical have been continuously monitoring new snaps that are being registered, to detect potentially malicious actors" and that they will now do manual reviews whenever people try to register "a new snap name".
On top of that soon they will also be releasing a new policy regarding "crypto-wallet and other sensitive snaps" with "guidelines for how to publish such a snap". Currently all of this is not supposed to be long-term, as it's an evolving situation.
Hopefully this will begin to put an end to scam apps making it into the Snap Store and onto machines running Ubuntu and any other Linux distribution that enables Snap packages.
wait isnt that the reason why we have repos in the first place?
if no one is looking at the code what is the point?
Instead of reinventing the wheel three times !
Quoting: pete910Or all the distros could just go back to ya know, the method of the signed packages it the repos
Instead of reinventing the wheel three times !
Amen! Amen! Amen!
Now, to paraphrase from that movie, I need to get some food in my Methodist stomach!
See more from me