Ranter
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Comments
-
So security vulnerability with broken update mechanism... this will be a good attack vector for the next several years
-
@demoralizeddev If only there was a way to update all applications via a single trusted source. It could even be integrated into the operating system, and remove the need of any "new update" popup. I guess we humans just aren't ready yet.
-
@Oktokolo this problem wouldn't exist if Windows wasn't so far behind GNU/Linux in package management, though
-
@Oktokolo I think they were referring to user package managers, which are so standard that literally every desktop operating system except Windows has them.
-
vrvksk14y@deadlyRants there are a couple of updaters you can use. Like Ninite which updates your applications with 1 click or auto.
-
@homo-lorens Windows has scoop and chocolatey. Altough they are far from the standard linux package managers they are at least something ¯\_(ツ)_/¯
-
@TheSilent isn’t the former a cross platform manager linked to a language like pip is to python ?
-
@TheSilent I don't know about scoop, last time I checked chocolatey was unbelievably slow and painful to work with. But it is a package manager and it does work.
-
@homo-lorens
Does MacOS has generic package management for non-Apple Apps?
In the Floss world, a general repository of applications and updates is "just" a matter of maintainer hours.
But when it comes to less-permissive licenses, you definitely need the cooperation of the application developers.
It also is easy to turn a monopoly (or semi-monopoly) app store into a global update repository as you can just dictate the terms (must use the prescribed package format or can't sell on the platform).
But Windows is dragging a looooong legacy of "freedom" around (yes, i recognize the irony).
The Microsoft app store probably has centralized update management though (don't know for sure, as i never visited it). -
@MadMadMadMrMim No it uses powershell scripts to install almost anything. It also describes itself as "Chocolatey is kind of like apt-get, but for Windows (with Windows comes limitations)".
You might be referring to OneGet (aka PackageManagement) which is a powershell package manager. -
@sandeepbalan see demoralizeddev's response. And people make deployment mistakes enough to account for most of the software vulnerabilities that are actually responsible frequently. Once a team of devs at adobe released a testing version of acrobat with a port open for automated testing years back that allowed people to get a shell to execute commands on the remote system.
-
@sandeepbalan if I do something regularly enough I try to write a script, because if I don't I'll need it up eventually
-
@sandeepbalan hard to say.
I have a script for launching my programs on boot at work or home. Scripts for testing, building, and running dev code using docker compose. Scripts for comparing remote apis, etc.
I usually have a tools folder with quick just for me scripts
Related Rants
How often do you guys mess up things you do regularly?
question
aplogy
struggles
vlc