Notices by Frank (frank@linuxrocks.online)

@humanetech @bitwarden This point is inherent to open source software distribution in general, but in it’s current form it saddens me that Biwarden is forced to maintain a flatpak release, because otherwise someone else will, even when there’s no ill intent (yet). See this Reddit discussion: https://www.reddit.com/r/Fedora/comments/ub8co5/flathub_security/

@bitwarden @humanetech Bitwarden is just an example of my gripe with how flatpaks and specifically Flathub functions. Here’s the link to the page:

https://flathub.org/apps/details/com.bitwarden.desktop

(1/2/) Let's say you (as a relatively normal Linux distro user) want to access your Bitwarden cloud vault through a desktop application. Bitwarden gives you the choice of an AppImage, a deb or rpm package (no auto-updates!) or a Snap package. Maybe you prefer flatpaks, so you could just install it from Flathub, right? Looks legit, because the Developer info mentions Bitwarden's parent company 8bit Solutions LLC. The info on Publisher is behind a link 'See details' which nobody clicks on. Hmmm...

(2/2/) I guess the text at the end of the long description (which nobody reads as well) should at least gives cause to some hesitancy, but maybe people have stronger faith in Flathub as an app store.

"This wrapper is not verified by, affiliated with, or supported by 8bit Solutions LLC."

Anyway, I feel more secure to just use the Gnome Web app and consider this the best option for Bitwarden.

#gnome #bitwarden #epiphany