Sovereign Tech Agency invests €500k in Flatpak(modal.cx)
265 points by eigenspace 13 days ago | 137 comments
tl;dr: Germany's Sovereign Tech Agency is investing €508,640 over two years to advance Flatpak's sandboxing and security capabilities, which currently lag behind Android and iOS. The funding will support new Portals for audio (separating speaker/microphone access), networking, VPNs, spell checking, and password auto-fill, plus infrastructure work on entitlements, intents, and general maintenance. The project runs through 2027 with contractors from the previous GNOME STF effort.
HN Discussion:
  • Supports the investment but notes need for backwards-compatible permission adoption by apps
  • ~STF funding model is appreciated but too temporary and non-strategic for critical infrastructure
  • Flatpak's design is flawed, opaque, or inferior to alternatives like firejail or containers
  • Flatpak's sandboxing is untrustworthy due to blanket permission exceptions granted to apps
  • Money would be better spent on traditional distro packaging rather than Flatpak