▲ 150 ▼ Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware (www.phoronix.com) submitted 4 months ago by Some_Emo_Chick@lemmy.world to c/technology@lemmy.world 28 comments fedilink hide all child comments
[–] northernlights@fedia.io 4 points 4 months ago (4 children) oh I saw "clang" in the list of packages and got worried permalink fedilink source parent hideshow 4 child comments replies: [–] Telorand@reddthat.com 1 point 4 months ago (3 children) You're only affected if you use the AUR. As far as I understand it, the core packages themselves are fine, so this is more of a MitM attack, where somebody compromised the package download streams permalink fedilink source parent hideshow 3 child comments replies: [–] cobalt32@lemmy.blahaj.zone 4 points 4 months ago (2 children) This is not a MitM attack. permalink fedilink source parent hideshow 2 child comments replies: [–] Telorand@reddthat.com 1 point 4 months ago (1 child) How is it not? They didn't take over the core projects, they took over the midstream distribution. permalink fedilink source parent hideshow 1 child comment replies: [–] northernlights@fedia.io 8 points 4 months ago* A MitM attack defines the attack technique, not the target. It's when the target wants to connect to something but it connects through you first, and you forward while collecting/altering data. My question was about the attack used. But yeah, a mass takeover of everything orphaned would do it. permalink fedilink source parent
[–] Telorand@reddthat.com 1 point 4 months ago (3 children) You're only affected if you use the AUR. As far as I understand it, the core packages themselves are fine, so this is more of a MitM attack, where somebody compromised the package download streams permalink fedilink source parent hideshow 3 child comments replies: [–] cobalt32@lemmy.blahaj.zone 4 points 4 months ago (2 children) This is not a MitM attack. permalink fedilink source parent hideshow 2 child comments replies: [–] Telorand@reddthat.com 1 point 4 months ago (1 child) How is it not? They didn't take over the core projects, they took over the midstream distribution. permalink fedilink source parent hideshow 1 child comment replies: [–] northernlights@fedia.io 8 points 4 months ago* A MitM attack defines the attack technique, not the target. It's when the target wants to connect to something but it connects through you first, and you forward while collecting/altering data. My question was about the attack used. But yeah, a mass takeover of everything orphaned would do it. permalink fedilink source parent
[–] cobalt32@lemmy.blahaj.zone 4 points 4 months ago (2 children) This is not a MitM attack. permalink fedilink source parent hideshow 2 child comments replies: [–] Telorand@reddthat.com 1 point 4 months ago (1 child) How is it not? They didn't take over the core projects, they took over the midstream distribution. permalink fedilink source parent hideshow 1 child comment replies: [–] northernlights@fedia.io 8 points 4 months ago* A MitM attack defines the attack technique, not the target. It's when the target wants to connect to something but it connects through you first, and you forward while collecting/altering data. My question was about the attack used. But yeah, a mass takeover of everything orphaned would do it. permalink fedilink source parent
[–] Telorand@reddthat.com 1 point 4 months ago (1 child) How is it not? They didn't take over the core projects, they took over the midstream distribution. permalink fedilink source parent hideshow 1 child comment replies: [–] northernlights@fedia.io 8 points 4 months ago* A MitM attack defines the attack technique, not the target. It's when the target wants to connect to something but it connects through you first, and you forward while collecting/altering data. My question was about the attack used. But yeah, a mass takeover of everything orphaned would do it. permalink fedilink source parent
[–] northernlights@fedia.io 8 points 4 months ago* A MitM attack defines the attack technique, not the target. It's when the target wants to connect to something but it connects through you first, and you forward while collecting/altering data. My question was about the attack used. But yeah, a mass takeover of everything orphaned would do it. permalink fedilink source parent