Ubuntu's trust problem in 4 concrete issues - verified facts, no FUD : linux

[–] anzo@programming.dev 11 points 2 weeks ago

I believe the community had expressed a lot of valuable ideas here, so I will keep the post. But I am locking the thread because it's just not information given in good faith. That's not to say that the points are all wrong, these can be debated. And we did debate. But the infographic itself is border to being just propaganda against a distro that serves well to a lot of users (this is a fact! even if me or you think those users could be served better.)

[–] rozodru@piefed.world 152 points 2 weeks ago (4 children)

automatically attaching snaps to apt is pretty much the one reason why I'll never use Ubuntu. and now I find out here that they put damn ads in the terminal for "Ubuntu Pro"? oh get fucked Canonical.

Friends don't let Friends install Ubuntu.

[–] GreatBlueHeron@lemmy.ca 43 points 2 weeks ago (3 children)

My main home server runs Ubuntu - I installed it 15-20 years ago and it's grown into a monster. I've been slowly documenting everything so I can reinstall with Debian. Have to up the priority of that project.

[–] chunkystyles@sopuli.xyz 14 points 2 weeks ago (1 children)

Debian is so nice as a server OS. It's also a great alternative for WSL if you're forced to use a Windows computer.

load more comments (1 replies)

load more comments (2 replies)

[–] TheOneCurly@feddit.online 31 points 2 weeks ago

And they've tied the dependency tree together such that you can't disable them without entirely breaking updates.

[–] ChairmanMeow@programming.dev 12 points 2 weeks ago

Even Microsoft hasn't put ads in the terminal I think.

[–] whyNotSquirrel@sh.itjust.works 5 points 2 weeks ago (1 children)

I left Ubuntu some years ago because I wanted apt install a package and it got hijacked by snaps without warning.

load more comments (1 replies)

[–] luciole@beehaw.org 78 points 2 weeks ago (2 children)

If anyone else would rather read text as text: https://www.linuxteck.com/ubuntu-trust-problem-2026/

[–] VitoRobles@lemmy.today 6 points 2 weeks ago

Appreciate it as a mobile user!

load more comments (1 replies)

[–] davidgro@lemmy.world 54 points 2 weeks ago (2 children)

Strong agree. I use a derivative that blocks snaps instead of direct Kubuntu now, and it wasn't Just because of the snaps.

[–] woelkchen@lemmy.world 34 points 2 weeks ago (9 children)

I use a derivative

Without Ubuntu Pro subscription the entire Universe repository does not receive any security updates by Canonical:

https://canonical.com/blog/ubuntu-pro-enhanced-security-and-manageability-for-linux-desktop

You should consider switching to an entirely independent distribution that does not lock security updates behind a paywall, perhaps something based directly on Debian or Fedora.

[–] mrnngglry@sh.itjust.works 16 points 2 weeks ago* (last edited 2 weeks ago) (12 children)

The updates available through Ubuntu Pro wouldn’t have normally been available prior to Pro. It’s an added service, not something that was previously available that is now locked behind a paywall. There are plenty of reasons to not like Canonical but this isn’t one.

load more comments (12 replies)

[–] grue@lemmy.world 7 points 2 weeks ago (15 children)

What's a better alternative that uses apt and KDE and has relatively up-to-date packages (other than Debian testing)?

[–] atomicStan@programming.dev 8 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

uses apt

May I ask why you seem to be married to the use of apt?

~~Just couldn't pass up on the opportunity to insert this banger.~~

load more comments (2 replies)

[–] Axolotl_cpp@feddit.it 7 points 2 weeks ago* (last edited 2 weeks ago)

Linux mint Debian Edition, and just install KDE yourself ig, otherwise MX linux KDE

load more comments (13 replies)

[–] Aatube@thriv.social 5 points 2 weeks ago* (last edited 2 weeks ago) (19 children)

Ubuntu Pro is free for personal use on up to five machines.

Also note that Universe is the community-maintained repository, sort of like the AUR but the community also reviews package creations. The Main repository is maintained by the Ubuntu Project and has always had free security updates.

load more comments (19 replies)

load more comments (6 replies)

load more comments (1 replies)

[–] unknown1234_5@kbin.earth 35 points 2 weeks ago (2 children)

the malware one happens in most repos at some point, but the rest is why i dont use ubuntu.

[–] slazer2au@lemmy.world 10 points 2 weeks ago

Yes, that is not just OS repos. There have been plenty of cases with PIP and NPM hosting malware.

[–] Qwel@sopuli.xyz 6 points 2 weeks ago

Not this kind of malware specifically. Their snap repo has a policy of allowing fully automatic app submission as long as the app is sandboxed. This led to multiple people submiting modified crypto wallet apps under the branding of the original trusted devs, without any challenge on Ubuntu's part. You could also put up a Librewolf version that leaks all the passwords you type in, or a Signal without encryption - ✨ endless creativity ✨. This specific attack is harder on Flathub as all apps have to be checked by the moderation team, and they should ask question if your Librewolf package is built from your own repo.

[–] RamRabbit@lemmy.world 26 points 2 weeks ago (1 children)

The article: https://www.linuxteck.com/ubuntu-trust-problem-2026/

[–] SlurpingPus@lemmy.world 12 points 2 weeks ago

Thanks. I have to wonder if people became allergic to posting text that can be resized to my screen.

Although the site is also shit, on the phone the text column is like twenty characters wide.

[–] Willoughby@piefed.world 26 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

arch

bow and arrow

is this from another dimension?

Is .gif different there?

[–] lvxferre@mander.xyz 48 points 2 weeks ago* (last edited 2 weeks ago)

All symbols are wrong, but in ways that oddly make sense:

Mint - it's a leaf.
Fedora - it's a wearable.
Debian - the logo coils itself, so does a snake.
Arch - arcus~arco~arc is "bow" in Latin/Romance.

I don't know if what I'm going to say is correct, but this smells like LLM shitting emojis.

[–] davidgro@lemmy.world 7 points 2 weeks ago

Seems in that place a Fedora is worn on the chest instead of head.

[–] Sunny@slrpnk.net 25 points 2 weeks ago (3 children)

I find it rather interesting that the same author wrote a new article about how to install Ubuntu 24.04 LTS the day after writing about Ubuntu's trust problem, but without mentioning the previous article or any point he previously made...

[–] Ek-Hou-Van-Braai@piefed.social 32 points 2 weeks ago (1 children)

I've come to learn that it might be AI writing these

[–] Sunny@slrpnk.net 14 points 2 weeks ago

100%... I just had a look through the other articles too and they reek of AI.

[–] Sunny@slrpnk.net 14 points 2 weeks ago

Im pretty sure these articles are written with AI. He already uses AI for generating images for the articles too. Like this paragraph from one of the articles.. Who the fudge writes like this?

Text in image:

This single question filters out script writers from script engineers. Most beginners write scripts that silently fail. Production scripts at companies like Stripe or Palantir use strict error handling from line one.

load more comments (1 replies)

[–] Lawnman23@piefed.social 23 points 2 weeks ago (2 children)

Ironically, just read an article recently about this exact issue.

https://itsfoss.com/opinion/why-hate-ubuntu/

load more comments (2 replies)

[–] Evil_Shrubbery@thelemmy.club 21 points 2 weeks ago (3 children)

Lmao, they put ads in the terminal? Are they pandering to Win11 users?? :)

load more comments (3 replies)

[–] Aatube@thriv.social 20 points 2 weeks ago (4 children)

is it just me or does especially the text read AI-generated?

[–] kungen@feddit.nu 12 points 2 weeks ago

The whole "verified facts, no FUD" title is exactly the kind of shit an LLM would write. (And it'll still make up a ton of "facts", of course)

[–] whimsy@lemmy.zip 8 points 2 weeks ago

This style of website design is almost certainly AI made

[–] sobchak@programming.dev 7 points 2 weeks ago

It's also using unicode emojis for Linux distros (that don't really make sense) instead of their logos. The whole thing is likely AI generated.

load more comments (1 replies)

[–] Xylight@lemdro.id 12 points 2 weeks ago

why is this infographic AI generated and where are the pixels

[–] Zier@fedia.io 12 points 2 weeks ago

Snap is the cancer of Linux. Go work for Micro$lop if you like to disrespect users.

[–] nyan@lemmy.cafe 11 points 2 weeks ago

. . . and it all boils down to "Canonical being into rent-seeking and having weird NIH issues that make it push low-quality own software (snaps in the current iteration, but there have been others) over better solutions used by other distros."

[–] woelkchen@lemmy.world 9 points 2 weeks ago

Original at https://www.linuxteck.com/ubuntu-trust-problem-2026/

I wondered why they didn't mention that the Universe repository comes without any form of official support and that unpaid community members are expected to cherry pick bug fixes and backport them, usually resulting in no updates, a potential security risk.

Then I scrolled down and they're suggesting Ubuntu derivatives that are also affected by this (Mint pop). I have the suspicion that they don't mention to make these two look good.

See https://www.flu0r1ne.net/logs/ubuntu_withholding_universe_security_patches for a somewhat recent (2023) overview on that topic and how Ubuntu Pro plays into this.

[–] markz@suppo.fi 9 points 2 weeks ago (4 children)

Why is fedora a tank top?

load more comments (4 replies)

[–] lemonhead2@lemmy.world 9 points 2 weeks ago (2 children)

ads in the terminal lol. back in 2009 I was a gentoo user and was distro shopping. looked at fedora Debian Ubuntu and arch and settled on Debian.

I don't remember if ubunto had either snap or unity back then... but I saw Ubunto as mainly making Debian easier to use. I was coming from Gentoo... debian was already easy to use 🙂

now, I use arch btw. switched in 2019 (mainly cause I got new hardware and needed latest releases and latest bugs 🙂)

load more comments (2 replies)

[–] raspberriesareyummy@lemmy.world 8 points 2 weeks ago

Oh how I hated it when I experienced the snap shenanigan firsthand.

[–] Axolotl_cpp@feddit.it 8 points 2 weeks ago

Too many pixels

[–] motruck@lemmy.zip 6 points 2 weeks ago (1 children)

Company gonna company. Switch back to Debian and realize most of what Ubuntu did was copy Debian and allow for non free drivers.

load more comments (1 replies)

[–] kbal@fedia.io 6 points 2 weeks ago (1 children)

With a title like that you know it's going to be 100% FUD. Not that Canonical doesn't deserve some of it.

load more comments (1 replies)

[–] ExLisper@lemmy.curiana.net 5 points 2 weeks ago (3 children)

Ubuntu is a distro for corporation, not individual users. It's fine if your company gives you Ubuntu laptop managed by desktop support but you should not install it yourself on your private computers.

load more comments (3 replies)

[–] m3t00@lemmy.world 5 points 2 weeks ago

pretty sure i ripped out snap by the short hairs. snap firefox was too buggy so switched to mozilla version. btw, i fucking hate apparmor defaults. it's gone too.

root@meh:~# snap

Command 'snap' not found, but can be installed with: apt install snapd