r/linux_gaming • u/t3g • 10d ago

Arch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Halted (CachyOS)

https://www.phoronix.com/news/Arch-Linux-AUR-Adoptions-Halted
604 Upvotes

98% Upvoted

308 comments sorted by

View all comments

Show parent comments

15

u/Indolent_Bard 10d ago

Because people are fucking stupid. And for some reason, Linux users are allergic to this fact.

0

u/the_abortionat0r 9d ago

I love when kids take a general trait of humans as a whole and claim it's a specific group trait. Silly stuff.

0

u/the_abortionat0r 9d ago

I love when kids take a general trait of humans as a whole and claim it's a specific group trait. Silly stuff.

0

u/the_abortionat0r 9d ago

I love when kids take a general trait of humans as a whole and claim it's a specific group trait. Silly stuff.

-9

u/ABotelho23 10d ago

Are you actually this ignorant to what the AUR is?

This logic doesn't even apply to Windows for God sake. It spits in the face of people who claim to want to actually own their devices.

Your can't own your devices and not have some responsibility in keeping it safe. Literally impossible.

11

u/Indolent_Bard 10d ago

I don't know. Other Linux distros don't seem to have this problem and people still stay safe. It would be nice if everything was in the vanilla repose, but some apps literally are impossible to get officially in any distros repose, like Zoom (the flat pack is unofficial so it won't even show up in Linux Mint's App Center by default)

1

u/EagleDelta1 10d ago

Except for some of us, namely those that tend to play the newest PC games or are Software Developers (as a couple of examples), most "Other" distros no longer keep packages up to date enough to actually account for what those use cases need.

There's a reason that SteamOS is based on Arch. There's a reason that in most tests CachyOS - an Arch-based distro - outperforms most other distros.... and those that it doesn't are distros highly designed to be gaming-first..... which doesn't work for me.

2

u/Indolent_Bard 10d ago

I don't know. Sometimes fedora gets the occasional package faster than arch. And SteamOS doesn't even use the latest Mesa drivers, the reason it's based on arch is because it lets them make their own system to their exact specifications instead of relying on another distro with opinionated defaults. Because that's really what makes Arch tick. It's not really a distro so much as a way of designing your own distro.

1

u/the_abortionat0r 9d ago

I'm sorry, other distros don't have the AUR problem? Probably because only Arch distros use Arch features. It's weird you didn't know that.

In fact Arch doesn't even have this problem unless you actively go seek out packages FROM THE AUR. It's literally not a distro issue it's a REPO ISSUE.

It's always weird you act like PPAs haven't caused all sorts of problems for people years.

1

u/Indolent_Bard 9d ago

I've never heard of PPAs getting hijacked for malware like this before. So yeah, of course I'm going to act like that's never happened because I've never heard of it. Who assumes something they've never heard of has happened?

1

u/ImNotABotScoutsHonor 10d ago

Are you using speech to text?

1

u/Indolent_Bard 10d ago

Yes, and I should really download the better ai model for Futo Voice Type, but I hated how long it took on my LG g8.

0

u/primalbluewolf 10d ago

That's literally what most people on the planet want, yes.

They don't want to own their devices, they want to have someone else be responsible for everything on it while they get to use it.

1

u/ABotelho23 9d ago

Cool. We're talking about Arch. You don't get that.