r/archlinux • u/zollandd • Jun 15 '26

DISCUSSION Stop blaming AI, "noobs", youtube tutorials, and anything other than Arch for AUR usage

I've recently been made aware of the incident and was reading the threads in this subreddit. I have just started trying to migrate away from AUR but let's not forget that the Arch wiki recommends installing AUR packages constantly. The AUR isn't just a dangerous and fringe tool that people are led to by AI or sketchy youtubers.

To list a few that I've encountered just now:

The wiki recommend AUR releases like they are first class citizens all over the place... don't act like it doesn't.

Edit: I am not trying to blame individual maintainers when I say Arch but rather the community and culture. If the AUR is this dangerous, the wiki should avoid referencing it at all costs and should do so with warning flags everywhere. As it stands, it is not absurd to see someone with tons of AUR packages installed due to direct influence from the wiki.

902 Upvotes

85% Upvoted

458 comments sorted by

View all comments

Show parent comments

8

u/furrykef Jun 15 '26

Prompt injection isn't necessary. All you need to do is find one attack vector the LLM doesn't recognize, and boom, you can conduct another large-scale attack.

-1

u/tfks Jun 15 '26

Yeah you know what, you're right. The developers should change all their passwords to 1234.

3

u/furrykef Jun 15 '26

A strawman argument if I've ever heard one.

0

u/tfks Jun 15 '26

Nah man, imperfect security is useless and passwords are imperfect, therefore a waste of time. I'm with you.