Arch is different...

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 5 days ago* (1 child)

Active AUR malicious packages incident (the AUR is locked)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 4 days ago (1 child)

    To be fair, adoption as a concept is the problem not the actual aur.

    The fundamentals of the aur was fine though that entire ordeal. It's just one optional choice layered on top that wasn't

    Blaming the aur fundamentally for that choice is like blaming the city planner for when a idiot turns down the wrong way on a one way street.

    We kinda just accepted the risk because the upsides were worth it. But some people are assholes and gotta ruin it for everyone.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 4 days ago

    This isn't the first type of problem that the AUR has had. A few years ago it had problems staying up, because it had no scalability to speak of.

    "Best hopes and wishes" is not an accepted engineering design strategy. If something can be abused, it will be. Not planning for it is just that, poor planning.

    The AUR has been poorly put together and this wave of malware is just another symptom of a deeper problem.

  • source
  • parent