Flatsonar

Corebird

by Timm Bäder

Twitter Client

Dangerous permissions Unverified publisher GPL-3.0+ v1.7.3
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made Corebird.

Donate
Screenshot 1 of Corebird Screenshot 2 of Corebird Screenshot 3 of Corebird

About

Corebird is a native GTK+ twitter client that provides vital features such as Direct Messages (DMs), tweet notifications, conversation views. Additional features include local viewing of videos, multiple inline images, Lists, Filters, multiple accounts, etc.

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • GPU acceleration
    --device=dri
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • org.baedert.corebird claims the domain baedert.org; only its owner can prove that
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing (x6)
    source:unpinned
  • fetches from anongit.freedesktop.org over unencrypted git: anyone on the path can swap the bytes (x2)
    source:insecure-url
  • the build has network access: it can download things the manifest does not list
    corebird:build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.