241
Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages (linuxiac.com)
submitted 3 months ago by to c/linux@programming.dev
71 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 3 months ago* (10 children)

Being critical towards operating system: Great

Actual argument: fair

Solution: oof

Debian is by all means great, for many things, but for a main pc? Shivers

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 5 points 3 months ago (6 children)

    What makes this a fair argument? Debian not having an AUR analogue? It's a shit response from someone who couldn't even be bothered to look up any information on what the AUR is or how it's supposed to be used. And what exactly is wrong with using debian on a "main pc"? If people want ancient packages with backported security patches they can knock themselves out. It doesn't fit my requirements, but there's nothing wrong with it either.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 0 points 3 months ago* (5 children)

    Its rather subjective but it wouldn’t be the first time updating arch has broken my system and its fair that some people don’t want to deal with that and much prefer some more mature.

    And i have no qualms with people who do use debian for a main system but i do assume everyone who do are retired folk with a long career in computing behind them and aren’t in the market to change to another.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 5 points 3 months ago

    The AUR is not the standard arch package repository and arch as a distro shouldn't be judged by it's merits or dangers. Yes, obviously a rolling release distro is not the best fit for most people, but that's beside the point. Debian is completely fine for people who are looking to replace their windows machine with something stable and don't need ton of exotic software or especially recent packages.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 0 points 3 months ago* (1 child)

    Who is having breaking update issues anymore in 2026? I've been running vanilla Arch for 10 years and the only times that has happened (there have been a handful I guess) the archwiki says "hey there's a breaking change run these 2 commands" and it's fixed. As a beginner on Linux I actually switched to Arch because every Ubuntu issue I googled was 6 to 10 lines to fix while arch was 1 to 3 lines. The only problem is that the OS expects that you be able to read, which is sometimes tough.

    I can't imagine being on a system that is multiple major releases behind on basic things like nvim and python. I guess if you're content not to use anything remotely current it makes sense.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] -1 points 3 months ago

    Being behind a few releases isn't that bad, honestly. At least you're certain it's going to be well tested and the majority of problems have been ironed out. And there'll be documentation already on how to fix things or work around certain missing features if that ever occurs. It's much less of a hassle.

  • permalink
  • fedilink
  • source
  • parent
  • [–] -1 points 3 months ago

    Why shivers ?

    It's stable, it has a HUGE software repo (one of the largest ones if I'm not mistaken), third party software and drivers are almost always available as a Debian package, the community behind it is actually serious about making it safe and problem free. So what if some of the software is not bleeding edge? At least I can rest easy when I'm updating my system. I'll almost never have any bad surprises like you get in Arch.

    Arch just takes whatever the latest software is and throws it in the repos for the users to figure out if it breaks. Half the solutions you find in the wiki are half-baked solutions just to make things work, but are often not standard or even secure, leaving your system with security holes.

  • permalink
  • fedilink
  • source
  • parent