4 ms·
stop trying to make AUR sound like a place that can be compromised. it's literary a tetanus ridden landfill, by design! it's nothing more than a place to shar
by iririririr 3mo ago
stop trying to make AUR sound like a place that can be compromised.
it's literary a tetanus ridden landfill, by design!
it's nothing more than a place to share one-file (one file!) recipe on how to conveniently build a repo from outside the arch tree. yes, is usually how software end up in arch (after much more work)
the fact that idiots (in the original sense of the word in Greek) made automatic installers that fools novices to think those are vetted distro packages doesn't make it so.
- account42 3mo agoThe arch team seems to think differently based on how they reacted to the compromise. Something doesn't have to be locked down from the start in order to be compromised.
- akimbostrawman 3mo agoNot being willing to knowingly and actively distribute malware does not mean they don't agree with OP. All the "use at own risk, no vetting" warnings all over the AUR and wiki support OPs claim if anything.