▲ 77 ▼ Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages (www.phoronix.com) submitted 2 months ago by steam_lover@sh.itjust.works to c/archlinux@lemmy.ml 24 comments fedilink hide all child comments
[–] SenatorCollins@aussie.zone 2 points 2 months ago (1 child) Oh, very rigorous software engineering standards. permalink fedilink source parent hideshow 2 child comments replies: [–] A_norny_mousse@piefed.zip 3 points 2 months ago* (last edited 2 months ago) (1 child) That's not what the AUR does. They simply provide a platform for users to share build scripts. There isn't much they can do beyond trying to vet accounts based on flimsy metrics, or weeding things out every now and then. The problem is that some people and even distros treat the AUR as a trusted source of software. All user repositories (javascript, Python etc.) suffer from malware btw.; the AUR is different in that it explicitely puts the responsibility of building packages on the user. ... I'm still missing some palpable information about these injections/malwares. https://bbs.archlinux.org/viewtopic.php?id=313892 permalink fedilink source parent hideshow 2 child comments replies: [–] SenatorCollins@aussie.zone 0 points 2 months ago Absolutely ludicrous. These are very very strong packages. permalink fedilink source parent
[–] A_norny_mousse@piefed.zip 3 points 2 months ago* (last edited 2 months ago) (1 child) That's not what the AUR does. They simply provide a platform for users to share build scripts. There isn't much they can do beyond trying to vet accounts based on flimsy metrics, or weeding things out every now and then. The problem is that some people and even distros treat the AUR as a trusted source of software. All user repositories (javascript, Python etc.) suffer from malware btw.; the AUR is different in that it explicitely puts the responsibility of building packages on the user. ... I'm still missing some palpable information about these injections/malwares. https://bbs.archlinux.org/viewtopic.php?id=313892 permalink fedilink source parent hideshow 2 child comments replies: [–] SenatorCollins@aussie.zone 0 points 2 months ago Absolutely ludicrous. These are very very strong packages. permalink fedilink source parent
[–] SenatorCollins@aussie.zone 0 points 2 months ago Absolutely ludicrous. These are very very strong packages. permalink fedilink source parent