Bonum Certa Men Certa

The Linux Mint Security Controversy Taken Out of Proportions, Distracting From Real Controversies

Clement Lefebvre
Photo from linuxmint.com



Summary: A so-called accusation (made in a personal blog) causes a media storm which neither Clement Lefebvre nor Canonical seem to be happy about

ONE of the best GNU/Linux distros (distributions of GNU, Linux, and desktop environments, complete with general-purpose applications), based on relative measures of popularity at least, is Linux Mint. It is so popular that in DistroWatch it beats Ubuntu sometimes. Canonical, which is in the centre of several controversies (over trademarks, privacy, and request for 'licensing' of binary packages) must realise that alternatives like Linux Mint can outgrow Ubuntu. There is a screenshots tour of Linux Mint 16 [1] and the release is imminent (now in RC [2-5]).



"Neither side was particularly upset over the original remarks, so to frame it otherwise would be somewhat dishonest."Some people want us to believe that Canonical uses FUD to discourage exploration of Mint as an alternative to Ubuntu (which Mint is a derivative of). Those people, however, base their analysis on the words of just one developer [6] whose words are rebutted by the Mint founder [7] (he is also unhappy about the source of the drama, namely Muktware [8,9], which led to more such coverage [10,11,12]). In trying to judge this, the whole scenario was a demonstration of media gone somewhat rogue, hostile where opportunism lies.

We have been watching this controversy closely for a number of days and it seems like sensationalist authors did a disservice and created an unnecessary rift. Neither side was particularly upset over the original remarks, so to frame it otherwise would be somewhat dishonest. It is very different from what happened recently when it comes to trademarks. Canonical and Shuttleworth (personally) were at fault and the EFF points this out in some follow-ups [13,14,15]. It is important to keep a sober balance and only criticise Canonical (Ubuntu steward) where the company (as a matter of company-wise policy) does something unethical. Presumption of guilt only leads to noise and distraction from the real issues.

Related/contextual items from the news:



  1. Linux Mint 16 Petra Cinnamon Desktop screenshot preview
    Linux Mint 16, code-named Petra, will be the next stable edition of Linux Mint, a desktop distribution based on Ubuntu Desktop. It could be released sometime this month or early next month (December).

    This distribution’s release track record suggests that Linux Mint 16 will be released less than two weeks from today. And when that happens, it will be the first stable edition of Linux Mint with Cinnamon 2.0 desktop pre-installed.


  2. Linux Mint 16 release candidate available for download
    Today in Open Source: Download the release candidate of Linux Mint 16. Plus: Will preloads help Linux? And the top five Linux games


  3. Linux Mint 16 RC released
  4. Linux Mint 16 RC Is Out With Cinnamon, MATE Desktops
    The release candidate version is now out for Linux Mint 16 'Petra' with MATE and Cinnamon 2.0 desktop flavors.

    It's getting close to another six-month update for the Ubuntu-based Linux Mint and the big feature this time around is the Cinnamon 2.0 desktop.


  5. Linux Mint 16 RC Brings Cinnamon 2.0 and MATE 1.6
    Clement Lefebvre had the pleasure of announcing a few hours ago, November 15, 2013, that the Release Candidate version of both the Cinnamon and MATE editions of the upcoming Linux Mint 16 operating systems are now available for download, and testing, from mirrors worldwide.


  6. Ubuntu dev, media slammed over 'security' comment
    Among these outlets were the OMGUbuntu and Muktware sites, both of which only deal with Linux and FOSS stories. In that context, it was even more surprising that they carried such reports.

    Muktware editor Swapnil Bhartiya was asked whether reporter Monika Bhati, the person who filed the story quoting Grawert and contributing to the hysteria, was a Linux user and also whether she had taken a look at the Mint update utility before writing.

    His response: "She is a resident journalist and uses Windows/Linux. We got Robin Jacobs to dive into the git pages and comments in LM to see how updates are labelled."

    Jacobs also wrote a story which, in effect, contradicted Bhati's story - and both stories appeared within 4€½ hours of each other on November 18.

    The editor of OMGUbuntu, which contributed to the same idea being spread, was asked similar questions to those put to Muktware.
  7. Answering controversy: Stability vs Security is something you configure
  8. Linux Mint falsely accused of being “insecure”


  9. Canonical developer criticizes Linux Mint’s security, called ‘a vulnerable system’
    Ubuntu developer Oliver Grawert does not prefer to do online banking with Linux Mint. The reason being its unsecure handling of packaging upgrades that could leave the system vulnerable to attacks.


  10. Canonical Developer Criticizes Linux Mint's Security


  11. Does Linux Mint need better security?
    There have been disturbing reports in the media about Linux Mint having security problems. Is this something to worry about or has it been wildly overblown by the press?


  12. Lead Ubuntu Developer Claims Linux Mint is an Unsecure Distro – Is It?


  13. EFF responds: Mark Shuttleworth is still wrong"
    Though Lee was not required, by the law, to remove the logo he removed it.


  14. Trademark Law Does Not Require Companies To Tirelessly Censor the Internet
    Over the past few days, EFF and one of our staff technologists, the talented Micah Lee, have had an illuminating back and forth with Canonical Ltd over the use of the Ubuntu mark. While we don’t believe that Canonical has acted with malice or intent to censor, its silly invocation of trademark law is disturbing. After all, not everyone has easy recourse to lawyers and the ability to push back.

    That matters, because Canonical’s actions reflect a much bigger problem: a pervasive and unfounded belief that if you don’t police every unauthorized use of a trademark you are in danger of losing it. We hope that some clarity on this point might help companies step back from wasteful and censorious trademark enforcement.

    First, some background. This particular story begins in 2012, when Canonical made the disappointing and widely criticized decision to integrate Amazon results into searches conducted through Ubuntu’s desktop dash (this meant that a user searching for one of her own files would receive results from Amazon). At the time, we argued that this default setting raised significant privacy concerns. A few weeks ago, Micah published a web site—at https://fixubuntu.com—that provided users with code to disable this privacy-invasive “feature.”


  15. Electronic Frontier Foundation Goes After Mark Shuttleworth and Canonical
    The Electronic Frontier Foundation, an organization devoted to the protection of freedom in the open source world, has criticized Canonical and Mark Shuttleworth.




Recent Techrights' Posts

Gemini Links 06/09/2025: Infinite Scrolling and Posting from Emacs
Links for the day
Links 06/09/2025: GitHub Meltdown Over Slop, "U.S. Jury Says Google Should Pay $425 Million in Privacy Lawsuit"
Links for the day
Despite Its Severe Financial Problems Gnome Foundation Inc Paid Rosanna Yuen Over 100,000 Dollars Last Year
maybe relocation should be considered
The "Left" and the Right"
It poisons everything
Mozilla and Rust Are Not Leftists
they're part of the mass consumerism machine
Disposable to Microsoft
There is an extensive set of people who got used by Microsoft, only to be thrown away a month later or a year later or a decade later
The UEFI 9/11 - Part VII - This Coming Week Many PCs Will Refuse to Boot "Linux" (Because of Microsoft's Expired Certificate)
The real solution is, disable "secure boot" or "SecureBoot" while it's still possible. [...] Just like submarine patents, a lot of this problem was "hibernating" for a while
The Thing Nobody in Red Hat Wants to Talk About Openly
There is a real sentiment or worry among Red Hatters, Europeans and Americans in particulars (because of higher salary expectations)
Slopwatch: Small Parade of Fake News About "Linux" and Scams Borrowing the Name (or Word) "Linux"
In practice, LLMs are a risk
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 05, 2025
IRC logs for Friday, September 05, 2025
Genini Links 05/09/2025: Community, ROOPHLOCH, and PITkit
Links for the day
Links 05/09/2025: Vaccine Sceptics Poison the Well, Two Exploited Vulnerabilities Patched in Android
Links for the day
Gemini Links 05/09/2025: Logitech Lift and DIY Gemini Servers
Links for the day
Links 05/09/2025: Sainsbury's Caught Spying on In-Store Shoppers and Microsoft "OpenAI is Using Legal Threats to Harass its Critics"
Links for the day
BASIC Predates Microsoft by Over a Decade, Microsoft-Controlled Sites Like The Register MS Don't Want You to Know This
The state of the media is really bad when it relies a lot on oligarchs' money and is appointing editors who are working for oligarchs
Analogies for "Memory Safety" in Rust
Don't worry, it's Rust! It can do anything!
Brian Kernighan, "Only Third to Dennis Richie and Ken Thompson" (UNIX), Agreed With Someone Who Said Rust Was Just Hype, Should Not Replace C
17 hours ago
Reminder: Microsoft's "Secure Boot" Certificate for "Linux" Will be Expired in One Week
Many PCs won't manage to 'rotate' to another certificate
"Many of the Red Hat Employees Are Still Looking for Work"
Shame on IBM's CEO
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 04, 2025
IRC logs for Thursday, September 04, 2025
Microsoft Started With Code Literally From The Trash, Nothing Has Improved Since
The reality is, there are systems and code that are reliable. But they're not Microsoft's.
Hypothesis That New McKinsey/Microsoft Executive Inside Red Hat Will Outsource Research and Development Operations to India (Like They Do in IBM)
IBM is floundering
Slopwatch: Scams, Fake Articles About "Linux", Plagiarism, and Worse
Perhaps some time soon the LLMs or the "Big LLMs" will run out of money (to borrow) and go offline, leaving those slopfarms in a tough place
Gemini Links 04/09/2025: Means of Production and Rusting Out
Links for the day
Links 04/09/2025: Science, Hardware, and Eyes on China
Links for the day
Gemini Links 04/09/2025: Digital Minimalism and Social Control Media
Links for the day
IBM's GNU/Linux Divestment, Based on Hard But Anecdotal Evidence (IBM Fails to Recognise How Much Money It Made and Can Still Make From "Linux")
Love us or hate us, a lot of what we've been saying about Red Hat under IBM turns out to be rather accurate
Links 04/09/2025: Massive Microsoft Staff Cuts (Barely Reported), "Strange Conspiracy Theory Is Reportedly Spreading Inside OpenAI"
Links for the day
Activists Can Win, But Keep an Eye on the Ball and on the Trophy
GitHub is dying, it was a loss-making trap, not free hosting
Gemini Links 04/09/2025: Katrina Remembered, Distracted Driving, and Virtual Economics
Links for the day
At This Point It's No Longer Matthew Garrett But People Who Fund Matthew Garrett (or Companies That Fund His SLAPPs Against My Wife and I)
The only thing worse than misogynists are misogynists who fail to respect other people's right to go on holiday
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 03, 2025
IRC logs for Wednesday, September 03, 2025
The UEFI 9/11 - Part VI - This Serious Harm Was Planned for Over a Decade, Not an Accident or Merely Some Misfortune
The term "Serious Harm" is legally meaningful here
GNOME Unfit for Diversity and Inclusion
GNOME's leadership is using "bad words"
Brodie Robertson Addressing the Recently-Discovered Comments
Most people probably knew nothing about this until he wrote a response
Red Hat QA Team "Had Shrunk by Half Over the Past Year." (After IBM Divestment)
If Red Hat's workforce is being moved to the East, then RHEL can become a national security problem
Slopwatch: "Open Source" and "Linux" News Faked, Made by Bots and Entered Into Google News
Spam combined with slop about "Linux" has entered Google News