Bonum Certa Men Certa

The Linux Mint Security Controversy Taken Out of Proportions, Distracting From Real Controversies

Clement Lefebvre
Photo from linuxmint.com



Summary: A so-called accusation (made in a personal blog) causes a media storm which neither Clement Lefebvre nor Canonical seem to be happy about

ONE of the best GNU/Linux distros (distributions of GNU, Linux, and desktop environments, complete with general-purpose applications), based on relative measures of popularity at least, is Linux Mint. It is so popular that in DistroWatch it beats Ubuntu sometimes. Canonical, which is in the centre of several controversies (over trademarks, privacy, and request for 'licensing' of binary packages) must realise that alternatives like Linux Mint can outgrow Ubuntu. There is a screenshots tour of Linux Mint 16 [1] and the release is imminent (now in RC [2-5]).



"Neither side was particularly upset over the original remarks, so to frame it otherwise would be somewhat dishonest."Some people want us to believe that Canonical uses FUD to discourage exploration of Mint as an alternative to Ubuntu (which Mint is a derivative of). Those people, however, base their analysis on the words of just one developer [6] whose words are rebutted by the Mint founder [7] (he is also unhappy about the source of the drama, namely Muktware [8,9], which led to more such coverage [10,11,12]). In trying to judge this, the whole scenario was a demonstration of media gone somewhat rogue, hostile where opportunism lies.

We have been watching this controversy closely for a number of days and it seems like sensationalist authors did a disservice and created an unnecessary rift. Neither side was particularly upset over the original remarks, so to frame it otherwise would be somewhat dishonest. It is very different from what happened recently when it comes to trademarks. Canonical and Shuttleworth (personally) were at fault and the EFF points this out in some follow-ups [13,14,15]. It is important to keep a sober balance and only criticise Canonical (Ubuntu steward) where the company (as a matter of company-wise policy) does something unethical. Presumption of guilt only leads to noise and distraction from the real issues.

Related/contextual items from the news:



  1. Linux Mint 16 Petra Cinnamon Desktop screenshot preview
    Linux Mint 16, code-named Petra, will be the next stable edition of Linux Mint, a desktop distribution based on Ubuntu Desktop. It could be released sometime this month or early next month (December).

    This distribution’s release track record suggests that Linux Mint 16 will be released less than two weeks from today. And when that happens, it will be the first stable edition of Linux Mint with Cinnamon 2.0 desktop pre-installed.


  2. Linux Mint 16 release candidate available for download
    Today in Open Source: Download the release candidate of Linux Mint 16. Plus: Will preloads help Linux? And the top five Linux games


  3. Linux Mint 16 RC released
  4. Linux Mint 16 RC Is Out With Cinnamon, MATE Desktops
    The release candidate version is now out for Linux Mint 16 'Petra' with MATE and Cinnamon 2.0 desktop flavors.

    It's getting close to another six-month update for the Ubuntu-based Linux Mint and the big feature this time around is the Cinnamon 2.0 desktop.


  5. Linux Mint 16 RC Brings Cinnamon 2.0 and MATE 1.6
    Clement Lefebvre had the pleasure of announcing a few hours ago, November 15, 2013, that the Release Candidate version of both the Cinnamon and MATE editions of the upcoming Linux Mint 16 operating systems are now available for download, and testing, from mirrors worldwide.


  6. Ubuntu dev, media slammed over 'security' comment
    Among these outlets were the OMGUbuntu and Muktware sites, both of which only deal with Linux and FOSS stories. In that context, it was even more surprising that they carried such reports.

    Muktware editor Swapnil Bhartiya was asked whether reporter Monika Bhati, the person who filed the story quoting Grawert and contributing to the hysteria, was a Linux user and also whether she had taken a look at the Mint update utility before writing.

    His response: "She is a resident journalist and uses Windows/Linux. We got Robin Jacobs to dive into the git pages and comments in LM to see how updates are labelled."

    Jacobs also wrote a story which, in effect, contradicted Bhati's story - and both stories appeared within 4€½ hours of each other on November 18.

    The editor of OMGUbuntu, which contributed to the same idea being spread, was asked similar questions to those put to Muktware.
  7. Answering controversy: Stability vs Security is something you configure
  8. Linux Mint falsely accused of being “insecure”


  9. Canonical developer criticizes Linux Mint’s security, called ‘a vulnerable system’
    Ubuntu developer Oliver Grawert does not prefer to do online banking with Linux Mint. The reason being its unsecure handling of packaging upgrades that could leave the system vulnerable to attacks.


  10. Canonical Developer Criticizes Linux Mint's Security


  11. Does Linux Mint need better security?
    There have been disturbing reports in the media about Linux Mint having security problems. Is this something to worry about or has it been wildly overblown by the press?


  12. Lead Ubuntu Developer Claims Linux Mint is an Unsecure Distro – Is It?


  13. EFF responds: Mark Shuttleworth is still wrong"
    Though Lee was not required, by the law, to remove the logo he removed it.


  14. Trademark Law Does Not Require Companies To Tirelessly Censor the Internet
    Over the past few days, EFF and one of our staff technologists, the talented Micah Lee, have had an illuminating back and forth with Canonical Ltd over the use of the Ubuntu mark. While we don’t believe that Canonical has acted with malice or intent to censor, its silly invocation of trademark law is disturbing. After all, not everyone has easy recourse to lawyers and the ability to push back.

    That matters, because Canonical’s actions reflect a much bigger problem: a pervasive and unfounded belief that if you don’t police every unauthorized use of a trademark you are in danger of losing it. We hope that some clarity on this point might help companies step back from wasteful and censorious trademark enforcement.

    First, some background. This particular story begins in 2012, when Canonical made the disappointing and widely criticized decision to integrate Amazon results into searches conducted through Ubuntu’s desktop dash (this meant that a user searching for one of her own files would receive results from Amazon). At the time, we argued that this default setting raised significant privacy concerns. A few weeks ago, Micah published a web site—at https://fixubuntu.com—that provided users with code to disable this privacy-invasive “feature.”


  15. Electronic Frontier Foundation Goes After Mark Shuttleworth and Canonical
    The Electronic Frontier Foundation, an organization devoted to the protection of freedom in the open source world, has criticized Canonical and Mark Shuttleworth.




Recent Techrights' Posts

How We Process Screenshots of Slop to Suitably Tag Them as Slop
everything is a single command
Seductive Mirage or Allure of Complex, Proprietary Coffee Machines (or Similar White Elephants)
Software is a lot like those things
 
Team GNOME Has Libeled Me for Nearly 20 Years
we are not dealing with sane people
Experience With Airlines in 'Web Sites' and in 'Apps'
In a lot of ways, Stallman Was Right about what JavaScript would turn out to be
Open Does Not Mean Free
wiser to ask if some program is freedom-respecting
The Register MS Takes Money From Companies Banned by the Biden and Trump Administrations (National Security Risk)
today's sponsor
Sabotaging GNU/Linux PCs (and Users) is Not a 'Joke'
maybe cruelty is the very objective
Links 11/08/2025: Data Breaches, Politics, and Climate
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, August 10, 2025
IRC logs for Sunday, August 10, 2025
Gemini Links 11/08/2025: Tea Caffeine Hot and Super ZZ Zero
Links for the day
Slopwatch: LinuxSecurity, Brian Fagioli, and Other Serial Sloppers
Maybe Microsoft wants to dub this "Web5"
Gemini Links 10/08/2025: Residents Management Company, Automation, and Politics
Links for the day
Links 10/08/2025: AOL Ending Dial-up
Links for the day
Links 10/08/2025: Webrings, “AI Sunglasses” and “AI Eyeglasses”, US Administration Intensifies Attacks on Science and Research
Links for the day
Sometimes Newer is Worse
We generally need to reject this dumb notion that "old" means bad
The Code Used to Make Techrights Fits on a Seventh of a Floppy Disk (or 100KB When Compressed)
For the sake of comparison I've just downloaded the latest version of WordPress. The ZIP file is 27.2MB in size, or ~27,200KB.
What They Tell Young Programmers
Coding in 2025
Simpler is Better When Simple is Enough
Over-complicating things to "sell" new versions is so 1990s
Links 10/08/2025: From Social Control Media to Prison, New Examples of Windows TCO
Links for the day
Sloppy Reporting About Slop, or How The Register MS Lowers Its Standards
Maybe the management isn't even aware of this
IBM's Strategy: Cull 'Expensive' Workers, Replace Them With Cheaper Ones
So far we saw not even one rebuttal or challenge to the claim of Red Hat layoffs scheduled for tomorrow
If You Attack Somebody Too Much You Legitimise and Strengthen That Somebody
at the end those attacks add up to a "martyr" status
The Man Who Helped Microsoft Kill Linux is Trying to Delay Our Lawsuits Against Him
By conservative estimates, and based on court documents submitted by them, they're prepared to spend over a million dollars on lawyers, fighting against me and my wife
Gemini Links 10/08/2025: Gen Con 2025 and Framework Laptop
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, August 09, 2025
IRC logs for Saturday, August 09, 2025
The Register MS (Microsoft) or The Register AI (Slop)?
What a slopfest!
Is Red Hat About to Give the Boot to GNOME People Who Helped Microsoft 'Secure' (Monopolised) Boot?
It was always a dumb idea to play along with Microsoft's hardware mischief
Sales of Windows on PCs (Windows Licences) Go Down
Microsoft has a big problem in its hands
The Hype That Microsoft and The Register MS (Among Others) Promote Helps Stage DDoS Attacks on Free Software Sites
Microsoft is, to put it bluntly, pure evil
The Goal of Coopetition Assumes You're Friends
it will never work with Microsoft
Links 09/08/2025: Putin Allegedly to Visit Alaska (Which He Deems Part of Russia), Mike Tyson Sued for Copyright Infringement
Links for the day
Slopwatch: Linux Journal, LinuxSecurity, and Google News With Its Slopfarms of Choice
SEO spam, made with LLMs
Follow the Money: The Register MS Gets Paid to Promote "Hey Hi" Ponzi Scheme/Hype, Some Fake 'Articles' Might Be Composed by LLMs Already
paid to promote slop
Gemini Links 09/08/2025: Rethinking Aliases and Posting on Gopher vs. the Web
Links for the day
Links 09/08/2025: Apollo 13 Astronaut Jim Lovell Dies, Slop Future Bleak
Links for the day
After Shutting Down Studios, Divisions, Applications (e.g. Skype) Microsoft is Also Shutting Down 'Apps'
Cuts all around as layoffs persist this month, Microsoft tries to get many people to resign, and debt skyrockets
Most of Geminispace Can Probably Fit on a CD-ROM or a DVD (the Textual Part)
If one excludes very large capsules and ones that contain non-textual contenty
Eventually UEFI 'Secure Boot' Will be Dropped (Users Will Demand Its Removal and Boycott Its Pushers)
we expect OEMs will just listen to users
The Register MS: We Know Slop is a Bubble and Mindless Hype, But We Get Paid to Participate
Call out the culprits
Hate Mail From Anonymous Cowards
if this persists, we'll need to escalate
There Are Probably Over a Million Pages in Geminispace
there are two many limitations which merit a mention when it comes to assessing magnitude
Informal Open Letter to the Lawyer of the Microsofters (on Who's Funding the SLAPPs Against Techrights)
Whenever I ask about the funding they try to change the subject and act all aggressive
Microsoft Lunduke is Just Provoking People for Provocation's Sake
Be forewarned and remember where this guy came from: Microsoft
Besieged by Plagiarists Who Play With LLMs and Image Fusions
We really need to exercise or use our collective voice to oppose Serial Sloppers
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, August 08, 2025
IRC logs for Friday, August 08, 2025
Gemini Links 09/08/2025: Water Painting and Political Violence
Links for the day