CNR, don’t use it

I’m going to be short about this one.

CNR is a kind of package manager that also has a website where you can download and install stuff.

It’s installed by default on freespire but can be installed on a number of distro’s (including ubuntu).

Why shouldn’t you use it?

1. You already have synaptic (in ubuntu, which has more software)
2. It has outdated software (like the lastest flash version hasn’t had the exploit fix)
3. The program itself has many security holes. (I’ve heard you don’t even need a password to install stuff).

Yeah, that was short.

    • SuperFly
    • April 17th, 2008

    I’ll have to disagree here on some of your points. Synaptic doesn’t come pre-installed with Ubuntu (although it’s available in the repository) and CNR is an exact mirror of the default Ubuntu repositories. I agree with your second point, they could use some updating. I’ve used CNR for the past 3 months or so, on my Ubuntu 7.10 machine, except that they currently only support 32 bit architecture, and I think they’ve come a long way.

    • KDEfan
    • April 17th, 2008

    For clarification I’m fairly sure that synaptic doesn’t come preinstalled on the KDE version but does on the general gnome (brown) release of ubuntu (sorry KDE fans :). Looking forward to testing the updated client ( for 8.04…

    • linuxowns
    • April 18th, 2008

    @ Superfly:

    Synaptic is the standard package manager (gui front for apt) for ubuntu (KDEfan has it right).

    And CNR doesn’t use the same repo’s.

    (the flash version is already updated in the ubuntu repo’s, but it wasn’t in the cnr repo’s when I wrote this post)

    CNR looks good but it’s not safe.

    • chris4585
    • April 19th, 2008

    nice, short, good post

    • kelvin273
    • April 21st, 2008

    You can argue about whether Synaptic is the “default” package manager in Ubuntu. You have the “Add/Remove” option under Applications (not sure what package manager that is), and you have access to Synaptic under System –> Administration.

    I’m inclined not to like CNR because it’s part of Freespire, which I tried and didn’t like on Live CD before switching from Vista to Ubuntu.

    • linuxowns
    • April 21st, 2008

    I think add/remove is just a nice cover for synaptic but I’m not sure.

    • Vadim P.
    • April 30th, 2008 is a good place for stuff not in add/remove or updated things.

    • chris4585
    • May 8th, 2008

    gnome-app-install is the package that you see as Add/Remove.. 😉 It took me a while to find it, I personally don’t like it.

  1. Hmm, I didn’t bother checking out the link, but it sounds something like Zero Install. Care to comment on the possible relation, if any?

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: