3 ms·

Anyone know how this affects the ArchLinux packages? kernel.org is still the fastest mirror around for them.

• naner 15y ago
  Probably not at all (the Arch userbase isn't much of a target). That being said, pacman doesn't implement package-signing last time I checked so it certainly would be easier to pass off bogus packages than with other distros.
  • crocowhile 15y ago
    Pacman now supports package signature verification (it'svery recent news.)