[re-sending, whoops i forgot to send this to all recipients. good job i decided to review it and update the wiki eh, else i wouldn't have known that i'd made the mistake of sending it only to lucas]
On Thu, Mar 15, 2012 at 12:05 AM, Lucas Adamski <[email protected]> wrote: > In fairness, its worth considering that a better overall user experience > could be obtained by having dynamically web > hosted without an explicit update process, because > a) it maximizes the community that can participate in building really great > apps (without having to figure out code > signing, versioning, Debian package management, etc) yes - and likewise any debian user knows that if they go download the source code of an app and compile/install it themselves, they are "on their own". hmmm, that's a good point. it would be a good idea to have the concept of /usr and /usr/local within B2G to recognise this. so... "...../gaia/usr" for pre-vetted "official" and "stable" stuff, but "...../gaia/usr/local/" for stuff that people want to put on there and do development. the problem comes of course when people start doing that en-masse, but that's their problem: they just "voided the warranty" anyway. so.... don't make it too easy, would be my advice! :) force them to get root access or something, make it part of the developer documentation and bury it deep. only the patient and the intelligent would find it :) _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
