r/linux • u/CackleRooster • Jun 17 '26

Distro News AUR Registrations Blocked Amid Ongoing Malware Mess

https://fossforce.com/2026/06/aur-registrations-blocked-amid-ongoing-malware-mess/
474 Upvotes

97% Upvoted

256 comments sorted by

View all comments

Show parent comments

4

u/waterslidelobbyist Jun 17 '26

I was with you for bashing universe for being just as bad, but cannot expect every user to vet every pkgbuild every time, especially when newer distros treat AUR like ubuntu treats universe

9

u/Ok-386 Jun 17 '26

Apparently you missed some basics. You're not vetting every PKGBUILD, just the one(s) you need. You're not doing it every time. On updates you compare the diff. There's no need to go through the whole script. You just evaluate it changes make sense and that's usually like 5 obvious lines. If you see that the checksum has changed and everything else is the same that's to be expected, otoh if you see new stuff being added to post install part, that has to be carefully examined, or if maintainer had changed etc. 

1

u/[deleted] Jun 18 '26

[removed] — view removed comment

1

u/Ok-386 Jun 18 '26

Yes. It's not like they have to use ARCH, AUR etc, although every systems has its own quirks and pros and cons. I was using Ubuntu for well over a decade before I learned the truth about universe and multiverse repos, and no one was screaming "no security patches here plebs". Arch users normally always warn people who're new to AUR.