cm0002@lemy.lol to Linux@programming.dev · 1 month agoArch Linux Blocks New AUR Registrations Amid Malware Cleanuplinuxiac.comexternal-linkmessage-square44linkfedilinkarrow-up1176arrow-down12
arrow-up1174arrow-down1external-linkArch Linux Blocks New AUR Registrations Amid Malware Cleanuplinuxiac.comcm0002@lemy.lol to Linux@programming.dev · 1 month agomessage-square44linkfedilink
minus-squareRicaz@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up25·1 month agoIt’s a USER repository, where you literally download install files from unverified strangers. There’s a reason all the AUR helpers prompt you to verify all the files before they will build or install anything.
minus-squarefruitcantfly@programming.devlinkfedilinkarrow-up11·1 month agoI wonder percentage of Arch users are actually capable of verifying that an AUR package is safe to install. I doubt that the number is very high, especially with the growing popularity of the distro
minus-squareRicaz@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up5·1 month agoThese days it’s very small. Most people just wanna use Arch because it’s cool. While I do wholeheartedly think it’s by far the best distro, I also frequently recommend Mint for newbies if they don’t enjoy learning on their own.
minus-squarebrucethemoose@lemmy.worldlinkfedilinkarrow-up3·1 month agoIt’s still hosted on archlinux.org. However “YMMV” the scripts are intended to be, they can’t host throngs of malware on their domain. …Well, I guess they could if they want to become the next npm, but it still seems like a legal liability. I’m not saying it should be taken down, but the status quo is definitely no longer acceptable.
It’s a USER repository, where you literally download install files from unverified strangers.
There’s a reason all the AUR helpers prompt you to verify all the files before they will build or install anything.
I wonder percentage of Arch users are actually capable of verifying that an AUR package is safe to install. I doubt that the number is very high, especially with the growing popularity of the distro
These days it’s very small. Most people just wanna use Arch because it’s cool.
While I do wholeheartedly think it’s by far the best distro, I also frequently recommend Mint for newbies if they don’t enjoy learning on their own.
This! 👆
It’s still hosted on archlinux.org.
However “YMMV” the scripts are intended to be, they can’t host throngs of malware on their domain.
…Well, I guess they could if they want to become the next npm, but it still seems like a legal liability.
I’m not saying it should be taken down, but the status quo is definitely no longer acceptable.
THANK YOU!