cm0002@europe.pub to Linux@programming.dev · 2 months agoArch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attackwww.phoronix.comexternal-linkmessage-square18linkfedilinkarrow-up1122arrow-down12
arrow-up1120arrow-down1external-linkArch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attackwww.phoronix.comcm0002@europe.pub to Linux@programming.dev · 2 months agomessage-square18linkfedilink
minus-squareMeshuggah333@piefed.worldlinkfedilinkEnglisharrow-up36arrow-down1·edit-22 months agoThe question here is why the f’ didn’t they shut down AUR packages takeover procedure? It makes no sense facing an attack of such a large scale.
minus-squarecaseyweederman@lemmy.calinkfedilinkarrow-up3·2 months agoIt’s the USER repositories. If you go, right now, to aur.archlinux.org, the very first section on the page after the header says DISCLAIMER: AUR packages are user produced content. Any use of the provided files is at your own risk. That’s always been there and every official messaging I’ve ever seen about the AUR has conformed. Read the changelogs because everything in the AUR is just a shell script some stranger wrote.
The question here is why the f’ didn’t they shut down AUR packages takeover procedure? It makes no sense facing an attack of such a large scale.
It’s the USER repositories. If you go, right now, to aur.archlinux.org, the very first section on the page after the header says
DISCLAIMER: AUR packages are user produced content. Any use of the provided files is at your own risk.
That’s always been there and every official messaging I’ve ever seen about the AUR has conformed. Read the changelogs because everything in the AUR is just a shell script some stranger wrote.