[M3devel] propose "output root" to replace shipping

[microcode at zoho.com]

I already said I don't care what happens with Windows. That platform
is and has always been riddled with security holes like Swiss cheese and
99.9% of Windows victims need an installer anyway. It's not whether they
need one it's just which one is least bad.

Perhaps you are not aware that every application you add to your system is
another vector for vulnerabilities and bugs. Perhaps you are also not aware
people running UNIX or UNIX-like OS really are not interested and in most
cases will simply not use anything that has any installation requirements
beyond a normal build or untarring a tarball.

I don't tolerate installers running as root downloading random crap from the
web. I download what I want myself from the correct site and I check the
signatures or checksums if provided. Then I build the application from
source. Then I check it. If it looks ok then I install it.

I don't think it's appropriate to burden non-Windows users with potential
malware just for the sake of Windows users. We are not accustomed to keep
clicking OK until the system reboots.

On Tue, Mar 24, 2015 at 12:08:13PM +0100, dirk muysers wrote:
> I doubt that you haven't given a look at 0install, because it cares well
> about security concerns. One of the problems with Windows 7 is that,
> if you install cm3 into the programs folder (where it should naturally
> belong to), you can't even create package directories or modify your code
> because of the very strict UAC that enforces immutability for everything
> belonging to a program.


> 
> -----Original Message----- From: microcode at zoho.com
> Sent: Tuesday, March 24, 2015 11:22 AM
> To: m3devel at elegosoft.com
> Subject: Re: [M3devel] propose "output root" to replace shipping
> 
> On Tue, Mar 24, 2015 at 10:01:39AM +0100, dirk muysers wrote:
> >Has anybody ever considered to use Zero Install for shipping and
> >distribution?
> 
> Requiring infrastructure to "install" something is a good way to kill off
> any remining interest. Please, keep the requirements to an absolute minimum
> and don't expect people to add tools or security holes to their OS except
> for Windows where that isn't a concern. Other platforms mostly don't expect
> plug and play installations nor do they want them.
> 
> 

--