Zerush@lemmy.ml to Open Source@lemmy.ml · 7 months agoOver 100,000 Infected Repos Found on GitHubapiiro.comexternal-linkmessage-square22fedilinkarrow-up162arrow-down11
arrow-up161arrow-down1external-linkOver 100,000 Infected Repos Found on GitHubapiiro.comZerush@lemmy.ml to Open Source@lemmy.ml · 7 months agomessage-square22fedilink
minus-squareDeckweiss@lemmy.worldlinkfedilinkarrow-up4·edit-27 months agoI completely agree with you on the ability part. There already have been cases where there was malware in the AUR. But the wiki specifically states to read the PKGBUILD and check the source url content before installing. I don’t think the system is at fault here. I mean, getting viruses/malware has always been mostly due to lazyness, user error and lack of knowledge.
minus-squareokamiueru@lemmy.worldlinkfedilinkarrow-up1·7 months agoIf you’re actually vetting PKGBUILD, I don’t think there is a single one I’ve installed that doesn’t download some blob. There is no way of knowing if it’s OK, unless you also sift through that. I don’t think anyone does. I certainly don’t.
I completely agree with you on the ability part. There already have been cases where there was malware in the AUR.
But the wiki specifically states to read the PKGBUILD and check the source url content before installing.
I don’t think the system is at fault here. I mean, getting viruses/malware has always been mostly due to lazyness, user error and lack of knowledge.
If you’re actually vetting PKGBUILD, I don’t think there is a single one I’ve installed that doesn’t download some blob. There is no way of knowing if it’s OK, unless you also sift through that. I don’t think anyone does. I certainly don’t.