Flatsonar

Vaccine

by VaccineApp

A Desktop 4chan Client

Broad permissions Unverified publisher GPL-3.0
Install Source code
Screenshot 1 of Vaccine Screenshot 2 of Vaccine Screenshot 3 of Vaccine

About

Vaccine is a desktop client for 4chan.org using GTK+.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • Wayland display
    --socket=wayland
  • network
    --share=network
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • org.vaccine.app claims the domain vaccine.org; only its owner can prove that
    publisher:namespace
  • fetches from git.gnome.org over unencrypted git: anyone on the path can swap the bytes (x2)
    source:insecure-url
  • git source tracks a moving branch: what gets built can change without the manifest changing (x3)
    source:unpinned

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.