Linux

65763 readers

653 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago

MODERATORS

nooter692@lemmy.ml

AgreeableLandscape@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

d3Xt3r@lemmy.nz

263

Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware (www.phoronix.com)

submitted 2 days ago by Virual@lemmy.dbzer0.com to c/linux@lemmy.ml

85 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] sonofearth@lemmy.world 0 points 13 hours ago (2 children)

Just don’t run random code that you don’t understand

I don't understand any code so does that mean I shouldn't use any software? that is 99% of the world.

whole purpose of AUR, users can create and share packages with minimum fuss

This doesn't take away responsibility away from the Arch team. I can manually review pkgbuilds all day trying to understand no problem but expecting the user to do it every update is stupid. At some point the user will just start to trust that package maintainer. I already mentioned few steps that the Arch team can take in a comment below.

[–] HaraldvonBlauzahn@feddit.org 0 points 13 hours ago* (last edited 12 hours ago) (1 children)

This doesn’t take away responsibility away from the Arch team.

The Arch team is not responsible for this code.

And to add, demanding to do more work from volunteers which already do a lot of work for free is rude. If you want something done - do it yourself.

[–] sonofearth@lemmy.world 0 points 13 hours ago* (last edited 12 hours ago)

I am not talking about the code. I am talking there are basically zero security measures.

Edit:

Demanding to do more work from volunteers which already do a lot of work for free is rude. If you want something done - do it yourself

Then don't make the platforms in the first place. This is such a stupid argument. It's like someone creating a nuke but then ignoring the security measures and telling the rest of the people to take care of it. Genius. Should stop asking people to switch over to Linux as well then. Might as well I should just start bad mouthing and defaming Linux because users are left on their own by a hostile community.

[–] HaraldvonBlauzahn@feddit.org 0 points 13 hours ago (1 children)

I don’t understand any code so does that mean I shouldn’t use any software? that is 99% of the world.

Not from AUR.

[–] sonofearth@lemmy.world 1 points 13 hours ago (1 children)

Without the AUR Arch becomes a third world country distro because the official repos have only the basics.

[–] HaraldvonBlauzahn@feddit.org 0 points 13 hours ago* (last edited 12 hours ago) (1 children)

Without the AUR Arch becomes a third world country distro because the official repos have only the basics.

Arch has 17,000 packages and is one of the largest distros. If you want more, you can use Debian, (or maybe NixOS, but you won't get the same quality).

And what do you need so many packages for?

[–] sonofearth@lemmy.world 1 points 13 hours ago

And what do you need so many packages for?

Zen Browser, Elecwhat (Whatsapp -- which is recommended in Arch Wiki), Razer peripherals drivers, heroic games launcher.