167
Arch Linux Blocks New AUR Registrations Amid Malware Cleanup (linuxiac.com)
submitted 4 months ago by to c/linux@programming.dev
39 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 26 points 4 months ago (8 children)

It's a USER repository, where you literally download install files from unverified strangers.

There's a reason all the AUR helpers prompt you to verify all the files before they will build or install anything.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 12 points 4 months ago (5 children)

    I wonder percentage of Arch users are actually capable of verifying that an AUR package is safe to install. I doubt that the number is very high, especially with the growing popularity of the distro

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 4 months ago (3 children)

    These days it's very small. Most people just wanna use Arch because it's cool.

    While I do wholeheartedly think it's by far the best distro, I also frequently recommend Mint for newbies if they don't enjoy learning on their own.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 4 months ago (2 children)

    In my case you can unironically blame Valve. I wanted an Arch-based distro to stay as close to SteamOS as possible but I have an nvidia GPU for the foreseeable future (unless I win the lottery or something).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 4 months ago* (1 child)

    It’s still hosted on archlinux.org.

    However “YMMV” the scripts are intended to be, they can’t host throngs of malware on their domain.

    …Well, I guess they could if they want to become the next npm, but it still seems like a legal liability.

    I’m not saying it should be taken down, but the status quo is definitely no longer acceptable.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •