Flatsonar

Nyxt

by Atlas Engineer

The hacker's browser

Dangerous permissions Verified creator BSD-3-Clause v3.12.0

Support the creators

Flatsonar is just the shop window. The people below made Nyxt.

Screenshot 1 of Nyxt Screenshot 2 of Nyxt Screenshot 3 of Nyxt Screenshot 4 of Nyxt Screenshot 5 of Nyxt

About

Quickly analyze, navigate, and extract information from the Internet. Nyxt is fully hackable — all of its source code can be introspected, modified, and tweaked to your exact specification.

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • network
    --share=network
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • printing
    --socket=cups
  • GPU acceleration
    --device=dri

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • fetches from prdownloads.sourceforge.net over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • installs a prebuilt binary instead of building from source
    source:prebuilt
  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.