• 57 Posts
  • 117 Comments
Joined 2 years ago
cake
Cake day: June 7th, 2023

help-circle











  • The malicious packages were found and removed quite quickly. Also anyone who doesn’t blindly install from the AUR would have seen a suspicious .lol url. I suppose that a genuine package using a .lol url isn’t impossible, it’s just very unlikely,

    These attacks do demonstrate the strength and weakness of the AUR, that anyone can upload anything at any time. The same as flathub and the snap store. Treat all of them with appropriate caution.






  • If you run endeavour, you are basically getting Arch with a familiar installer, a few useful helper scripts, and a friendly community. You are still expected to know your hardware and your install. You are still expected to keep up with the Arch news, and make any manual interventions required. If you do that, endeavour is remarkably reliable.