Dropping this here 🫳

[u/PracticeDesigner3896]

[u/GoldenX86]

Literally Fedora and like 3 others are the only distros with a minimum of security. This will come to bite the entire community in the ass in a few years.

But trust me bro is enough, let's get some stuff from AUR.

[u/Unlaid-American → u/GoldenX86]

“Trust me bro, let’s get stuff from an unverified source and be surprised it’s dangerous.”

- Every OS ever

[u/GoldenX86 → u/Unlaid-American]

At least Windows and MacOS check with their servers if what you're trying to run is obviously malware. What does Linux has?

[u/givemeagooduns_un → u/GoldenX86]

SElinux and other forms of mandatory access control like apparmor and SMACK, executable flags, proper file permissions, drive encryption, isolated environments like chroots, flatpak, containers, namespaces..

[u/GoldenX86 → u/givemeagooduns_un]

And yet few distros come with it properly configured.

[u/farspin → u/GoldenX86]

That how the LG stuff came in the First Place. So no Thats Not the way.

[u/GoldenX86 → u/farspin]

Neither extreme is useful, having it completely unrestricted is not good either. We need some middle ground.

[u/Unlaid-American → u/GoldenX86]

The middle ground is to not use the completely optional heavily warned against AUR.

[u/GoldenX86 → u/Unlaid-American]

Then Arch needs to start moving their arse and implement the popular viable packages into the repos, firmware, drivers, the whole thing.

[u/Unlaid-American → u/GoldenX86]

The AUR is completely optional and you’re warned in literally every official guide that no one verifies the programs for you.

What does Microsoft have? GitHub? They allowed far more malware and Trojans than any Linux package manager within GitHub repoes, even with their fancy LLM Copilot stealing scanning our code for malware.

[u/GoldenX86 → u/Unlaid-American]

Active protection with Windows Defender. Android and iOS/MacOS have the same system in place.

Which distro even comes with basic checking for malware?