Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Exactly.

Modern Ubuntu systems rely on Snap or Flatpak for a lot of software. What these systems do (as I understand it) is package a large amount of the dynamic libraries that would be provided by the operating system, and stick them in a compressed file (or virtual file system, whatever).

So what you essentially get is a 200MiB 'binary' without any of the benefits of dynamic linking (being able to swap out a library given a vulnerability without recompiling) OR static linking (a single file, with the extraneous code removed, etc. etc.).



With flatpak, you can update the runtime (a bundle of libraries) independently of the app, so you can swap out a library with a vulnerability without recompiling.


That's not why runtimes exist though - it's too save disk space.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: