Bonum Certa Men Certa

The Linux Mint Security Controversy Taken Out of Proportions, Distracting From Real Controversies

Clement Lefebvre
Photo from linuxmint.com



Summary: A so-called accusation (made in a personal blog) causes a media storm which neither Clement Lefebvre nor Canonical seem to be happy about

ONE of the best GNU/Linux distros (distributions of GNU, Linux, and desktop environments, complete with general-purpose applications), based on relative measures of popularity at least, is Linux Mint. It is so popular that in DistroWatch it beats Ubuntu sometimes. Canonical, which is in the centre of several controversies (over trademarks, privacy, and request for 'licensing' of binary packages) must realise that alternatives like Linux Mint can outgrow Ubuntu. There is a screenshots tour of Linux Mint 16 [1] and the release is imminent (now in RC [2-5]).



"Neither side was particularly upset over the original remarks, so to frame it otherwise would be somewhat dishonest."Some people want us to believe that Canonical uses FUD to discourage exploration of Mint as an alternative to Ubuntu (which Mint is a derivative of). Those people, however, base their analysis on the words of just one developer [6] whose words are rebutted by the Mint founder [7] (he is also unhappy about the source of the drama, namely Muktware [8,9], which led to more such coverage [10,11,12]). In trying to judge this, the whole scenario was a demonstration of media gone somewhat rogue, hostile where opportunism lies.

We have been watching this controversy closely for a number of days and it seems like sensationalist authors did a disservice and created an unnecessary rift. Neither side was particularly upset over the original remarks, so to frame it otherwise would be somewhat dishonest. It is very different from what happened recently when it comes to trademarks. Canonical and Shuttleworth (personally) were at fault and the EFF points this out in some follow-ups [13,14,15]. It is important to keep a sober balance and only criticise Canonical (Ubuntu steward) where the company (as a matter of company-wise policy) does something unethical. Presumption of guilt only leads to noise and distraction from the real issues.

Related/contextual items from the news:



  1. Linux Mint 16 Petra Cinnamon Desktop screenshot preview
    Linux Mint 16, code-named Petra, will be the next stable edition of Linux Mint, a desktop distribution based on Ubuntu Desktop. It could be released sometime this month or early next month (December).

    This distribution’s release track record suggests that Linux Mint 16 will be released less than two weeks from today. And when that happens, it will be the first stable edition of Linux Mint with Cinnamon 2.0 desktop pre-installed.


  2. Linux Mint 16 release candidate available for download
    Today in Open Source: Download the release candidate of Linux Mint 16. Plus: Will preloads help Linux? And the top five Linux games


  3. Linux Mint 16 RC released
  4. Linux Mint 16 RC Is Out With Cinnamon, MATE Desktops
    The release candidate version is now out for Linux Mint 16 'Petra' with MATE and Cinnamon 2.0 desktop flavors.

    It's getting close to another six-month update for the Ubuntu-based Linux Mint and the big feature this time around is the Cinnamon 2.0 desktop.


  5. Linux Mint 16 RC Brings Cinnamon 2.0 and MATE 1.6
    Clement Lefebvre had the pleasure of announcing a few hours ago, November 15, 2013, that the Release Candidate version of both the Cinnamon and MATE editions of the upcoming Linux Mint 16 operating systems are now available for download, and testing, from mirrors worldwide.


  6. Ubuntu dev, media slammed over 'security' comment
    Among these outlets were the OMGUbuntu and Muktware sites, both of which only deal with Linux and FOSS stories. In that context, it was even more surprising that they carried such reports.

    Muktware editor Swapnil Bhartiya was asked whether reporter Monika Bhati, the person who filed the story quoting Grawert and contributing to the hysteria, was a Linux user and also whether she had taken a look at the Mint update utility before writing.

    His response: "She is a resident journalist and uses Windows/Linux. We got Robin Jacobs to dive into the git pages and comments in LM to see how updates are labelled."

    Jacobs also wrote a story which, in effect, contradicted Bhati's story - and both stories appeared within 4€½ hours of each other on November 18.

    The editor of OMGUbuntu, which contributed to the same idea being spread, was asked similar questions to those put to Muktware.
  7. Answering controversy: Stability vs Security is something you configure
  8. Linux Mint falsely accused of being “insecure”


  9. Canonical developer criticizes Linux Mint’s security, called ‘a vulnerable system’
    Ubuntu developer Oliver Grawert does not prefer to do online banking with Linux Mint. The reason being its unsecure handling of packaging upgrades that could leave the system vulnerable to attacks.


  10. Canonical Developer Criticizes Linux Mint's Security


  11. Does Linux Mint need better security?
    There have been disturbing reports in the media about Linux Mint having security problems. Is this something to worry about or has it been wildly overblown by the press?


  12. Lead Ubuntu Developer Claims Linux Mint is an Unsecure Distro – Is It?


  13. EFF responds: Mark Shuttleworth is still wrong"
    Though Lee was not required, by the law, to remove the logo he removed it.


  14. Trademark Law Does Not Require Companies To Tirelessly Censor the Internet
    Over the past few days, EFF and one of our staff technologists, the talented Micah Lee, have had an illuminating back and forth with Canonical Ltd over the use of the Ubuntu mark. While we don’t believe that Canonical has acted with malice or intent to censor, its silly invocation of trademark law is disturbing. After all, not everyone has easy recourse to lawyers and the ability to push back.

    That matters, because Canonical’s actions reflect a much bigger problem: a pervasive and unfounded belief that if you don’t police every unauthorized use of a trademark you are in danger of losing it. We hope that some clarity on this point might help companies step back from wasteful and censorious trademark enforcement.

    First, some background. This particular story begins in 2012, when Canonical made the disappointing and widely criticized decision to integrate Amazon results into searches conducted through Ubuntu’s desktop dash (this meant that a user searching for one of her own files would receive results from Amazon). At the time, we argued that this default setting raised significant privacy concerns. A few weeks ago, Micah published a web site—at https://fixubuntu.com—that provided users with code to disable this privacy-invasive “feature.”


  15. Electronic Frontier Foundation Goes After Mark Shuttleworth and Canonical
    The Electronic Frontier Foundation, an organization devoted to the protection of freedom in the open source world, has criticized Canonical and Mark Shuttleworth.




Recent Techrights' Posts

Watch the FSF Party Live (via Livestream)
It's in WebM format, which is widely supported by now
Advocacy of Software Freedom Changed, LUGs Became Less Relevant
The way we see it, support groups like LUGs sort of outlived their usefulness when it became easier to install GNU/Linux
For the Second Time in a Few Weeks Microsoft Lunduke Makes False Accusations Against Senior Red Hat Staff to Incite a Despicable 'Troll Army'
Nothing that Microsoft Lunduke claims or says can be trusted
Compromised by NVIDIA Proprietary Library
Meanwhile in Boston there are "[r]oundtable talk with FSF volunteers (both in-person and online)"
How Software Patents Were Viewed or Their General Status Changed Over Time
A rough summary
 
Links 05/10/2025: Political Leftovers, Climate Change, and Security Incidents
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, October 04, 2025
IRC logs for Saturday, October 04, 2025
When Microsoft "Integrates" Something With "AI" It Means It's Losing Money and Is Generally Hopeless
how did Bing fare after 36 months of LLM slop being hyped up as "replacement" for search?
Most Certificates Don't Improve Security, They Mostly Increase Downtime (for No Good Reason)
The 'Gemini sites' (capsules) are a growing force
The statCounter Site Has Data Integrity Problems
Maybe we'll get back to statCounter when its data becomes more "stable" again
10 Ways to Combat Software Patents
software patents are loathed also by proprietary software developers
"Just a Little Bit of Meat..."
Free software "absolutism" is not a radical stance, more so if the only "radical" belief the user possesses is that he or she must be in control of his or her software, and by extension his or her computer
Red Hat is Ignoring the Free Software Community, It's a "Fortune 1000" Vendor
Red Hat's blog also participates a lot in promoting of Wall Street's latest pump-and-dump "AI" scheme
Free Software Foundation Party Has Begun
We shall be focusing a lot on software patents today
Former Head of the Federal Trade Commission (FTC) Lina Khan Knows Whatever Microsoft Touches Will Die
Just like Skype (as recently as months ago) [...] When Microsoft grabs things, or when it buys things, it almost never ends well
Slopwatch: Fake Articles About LibreOffice in Austria and Wine 10.16
very short
Links 04/10/2025: "attempted Coup" Noted in Facebook, Russia Kills Journalists via Drones
Links for the day
Gemini Links 04/10/2025: Anesthesia and Baudpunk
Links for the day
Links 04/10/2025: "Privacy Harm Is Harm", Criticism Outlawed in US
Links for the day
Garmin Uses Linux for Some of the Garmin Products, Now It's Sued by Strava Using Software Patents
Software patents should never have been granted in the first place
Richard Stallman Will Give a Talk in Sweden in 6 Days
Dr. Stallman, despite his battle with cancer is still alive and mentally sharp
FSF Turns 40
We'll be focusing on patent-related topics this weekend
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 03, 2025
IRC logs for Friday, October 03, 2025
Gemini Links 04/10/2025: Distro Hopping and "Part Time"
Links for the day
We Are Turning 19 in One Month, FSF Turns 40 in 3 Hours (CET)
For our anniversary next month we still have no concrete plans
Patent Docs (or PatentDocs) Learned the Wrong Lessons From the Death of TypePad
Had they gone ahead with an SSG, they'd become a lot more future-proof
USPTO Patent Bubble Already Imploding, After Decades of Artificial Inflation, Entire Offices Close for Good
we can deduce that financial pressures (lack of "demand" for monopolies) play a role
TikTok is Not Harmless (Being CheeTok in the US Will Advance Orange Agenda)
Social control media isn't "fun and games"; it's a digital weapon that lets hostile groups or nations infiltrate others, then turn them against themselves
Andy Farnell and Helen Plews Explain What "Modern" Tech Does to Old People
Imposing terrible tech "religion" on people is not helping them
Tomorrow the Free Software Foundation (FSF) Turns 40 and Its Web Site is Still Slow Due to DDoS by LLM Slop Bots
For an advocacy group, uptime is important (for its message to remain accessible)
Slopwatch: Google News as a Firehose of LLM Slop About "Linux"
Google News is really bad
Datamation, Where I Used to Publish Articles, Appears to Have Been Sold to TechnologyAdvice Only to Become a Slopfarm
I'd prefer to not associate with that site anymore
Links 03/10/2025: "NPR’s Economics Lessons Come With Neoliberal Spin" and Canada Post at Risk
Links for the day
Gemini Links 03/10/2025: Panic Attacks and Food Adulteration
Links for the day
Links 03/10/2025: Lawyers Caught Using LLM Slop Explain Why They Did It, LibreSSL 4.1.1 and 4.0.1 Released
Links for the day
FSF Board Grew 50% Since Last Year, Has New President, Turns 40 in Two Days
It's a good move for the FSF and - by extension - for software freedom
Links 03/10/2025: Conflicts, Death of TypePad, and TikTok/CheeTok Gives a Boost to Far Right Groups in Europe
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 02, 2025
IRC logs for Thursday, October 02, 2025
Slopwatch: Linux Journal, Google News, and LinuxSecurity
They carry on polluting the Web with fake articles
Gemini Links 02/10/2025: Kubernetes With FreeBSD and robots.txt
Links for the day