[–] 4 points 5 months ago* (last edited 5 months ago)

The problem is the delivery mechanism. Malware is quite rare in linux because we trust the maintainers. Unlike in windows where you're normalized to download executable off of the internet

Edit: What I meant is that notice almost always all of the attack on linux is supply chain based and not direct malware download. Be it via typosquat, package manager repository hijacking, or even long game like xz

  • source
  • parent
  • context
  • [–] 37 points 5 months ago (3 children)

    Honestly I take no issue with the malware attack. I find it more offensive that many publications write it like it's the end of Arch. Like bro, AUR is NOT what I'd recommend to beginners to get their packages from. Some of the obscure packages include browser extension. Like, why would you install an extension from the AUR instead of the browser extension marketplace? This is why easy and braindead AUR helpers need to die. It encourages bad practice

  • source
  • view more: ‹ prev next ›