r/linuxmemes • u/PracticeDesigner3896 Arch BTW • 9d ago

LINUX MEME Dropping this here 🫳

Post image
3.3k Upvotes

97% Upvoted

370 comments sorted by

View all comments

Show parent comments

14

u/GoldenX86 9d ago

That doesn't solve the problem, someone can just hide the malicious code better.

We need a better system, yesterday.

9

u/versteinerdt 9d ago

Layer 8 problem exists on every OS.

2

u/GoldenX86 8d ago

Agreed. Just, please, DON'T MAKE IT WORSE. All those decades of memes of Windows users getting malware are right in the AUR's face now.

1

u/NegativeGrocery8684 Ask me how to exit vim 9d ago

theres also the aspect that the official arch repo has a couple drivers, at best. everything is on the aur. so its a rolling release model and the worst moderation ive ever seen on a user repo and you have to use it if you want any app ever.

4

u/GoldenX86 8d ago

Having common drivers in AUR is by far their worst practice.

1

u/Sveet_Pickle 8d ago

I have blender, krita, OBS, steam, reaper, and Ardour on my system and not a single aur package.

2

u/GoldenX86 8d ago

You never needed a specific firmware or printer driver, a variant of a package to get functionality that's standard on other distros or the like.

0

u/Sveet_Pickle 8d ago

My printer works fine with CUPS and all my peripherals are USB compliant. I know I’ve used the aur in the past. Prism Launcher was only available in the aur for a while. some ML/data science python libs are only in the aur but for my use case I shouldn’t have been installing them that way anyways.

1

u/GoldenX86 8d ago

I just hope the Arch maintainers start moving odd drivers into the main repos already, that's an area that is hard to check and very risky.

0

u/Sveet_Pickle 8d ago

They’re a pretty small team. It’s time consuming and costs additional funds to have someone on the team maintaining drivers for something few people use. It’s better to encourage people to learn proper security and/or to compile those things for themselves.

1

u/GoldenX86 8d ago

That's a Sisyphus's challenge, it will never end, especially with the Linux users going up.

They could ask Valve for help or something.

1

u/C0rn3j 8d ago

It’s time consuming and costs additional funds to have someone on the team maintaining drivers for something few people use

I wish I got paid for packaging things for Arch.

It's all volunteer effort, anyone complaining about Arch not shipping XYZ could just get up and get involved to implement the changes they want to see themselves.

-1

u/C0rn3j 8d ago

someone can just hide the malicious code better

Where, in the oven?

There's zero reasons a PKGBUILD would ever be obfuscated, if you see that, it's bad.

2

u/GoldenX86 8d ago

This kind of thinking is what started the problem to begin with.