lbryio / lbryio/lbry-desktop

[insecurity] don't auto-update when I click "later"

Open
#3,545 8 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

type: bug
Dominant language
JavaScript
Stars
3.5k
Forks
409
PR merge metrics
No merged PRs in 30d

Description

first off, I'm using the appimage build for a reason, and expect the old version to remain whenever the update is downloaded.
the app has NO right to breach my PC security and replace the current version with the declined upgrade.
(this is exactly what makes electron a malware tunnel, since it's a public space app framework any hacker can take control of to destroy any target they want)

add to that it's broken anyways #3540
so that's all the more reason I should have to manually download the update, like every other appimage I use.

but most importantly, when I decline the update, that doesn't mean "go through with the update"
I expect to manually download the updated appimage I need from the releases page here.
automating this process is an insecurity.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review the Electron AppImage update flow and issue #3540 first, then reproduce the behavior by choosing “Later” in the update prompt. Done means declining the update leaves the current AppImage installed and requires the user to download a newer AppImage manually from the releases page.

Written by the indexing model from the issue text.

Assessment

Tech stack
electron, javascript
Domain
desktop
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.