AUR is basically a convenient automated installation framework for untrusted packages, if AUR didn't exist you'd be complaining about having to build these extra softwares and libraries by yourselves, your system'd still have been compromised this way unless you read the fucking PKGBUILD.
because fucking noobs and normies are straight up going to arch instead of actually learning linux first by going to some easier distro and then complain the """hard""" distro is hard for them noob and it needs safe guard.
>>109064091I only had good experience with fedora, when it comes to linux.
>>109064141This.
>>109064141what exactly is hard on Arch?I have started like most people with ubungu etc. then Arch, almost a decade ago and the only thing that was "hard" was reading the wiki for how to install it, after that it's just pacman -Syu every week.don't know where you people come from with the idea that Arch is a difficult distro.
Because vocal linux users are just a different brand of console warring retards. The rest of us just use whatever OS we see fit.
>>109064091If you use a distro made by competent people, you will have almost everything in your normal repos anyway and for everything else, the software vendors will provide their own repo on their website, with their own private key that nobody can just snatch when it becomes "abandoned".
>>109064091Bitching? You misunderstood us, fren. We're laughing at arch retards.
>>109064181completely misunderstood the point kek
>>109064091Guess Arch should put a warning on their .iso download page like:> Hey, some of our package managers might build a literal malware right on your PC and you will get pozzed. Be careful.
>>109064318you mean this?
been using arch for years never used AUR for anything
>>109064323That other guy isn't even an arch user. No actual arch user is upset at Arch or the AUR over this. It's literally impossible to have installed shit from the AUR without having read fifty of these disclaimers.
>>109064318There's already a warning.Should they put out a warning telling you to be careful with "rm -rf /" too?
>>109064318tell me what arch official package manager can install stuff from the AURthe only arch package manager is pacman
>>109064091It's just people who hate Arch, or Linux in general, seeing an opportunity to take the piss.Attacks like this have always been possible by AUR's design, it's a dumping ground for random shit, blindly trusting anything from AUR is the same as running any random exe you find on the internet and everyone knows that, or at least should know. The only surprising thing this time was the sheer scale.
>>109064318But Arch doesn't even come with a package manager that can install AUR packages?
>>109064091At first I was with you, ez fix nothingburger. It’s just a user repository with a retarded policy for abandoned software. Dumb, but not a big deal.Except the Arch maintainers have done FUCKALL in response to the orphaned packages loophole.Which signals to me they’re just hoping people forget about it.Naaaah, I think I going join with everyone else in making fun of this.If you shit where you eat I WILL make fun of you for eating shit, and i won’t let you forget it.
>>109065952This. Check out how the lundcuck journal delivers the news. https://youtu.be/oLK-OWdEm7IIts all "rust and npm bad", and "its over if you are using AUR, you might as well nuke your entire shit right the fuck now" with absolutely no metion about the nature of the attack. Well, while rust and npm are indeed bad, the whole point was to actually inform people about how the hackers highjacked orphaned packages to deliver their malware. That faggot did such a terrible job at delivering the news, Im questioning his journo credibility while wondering why the fuck so many retards pay for a sub to that faggot.On the other hand, all that fearmongering might not only drive away all the arch posers from the Arch ecosystem, it might also give an incentive to AUR devs to fix some security logics on their site that should have been adressed for years. Personally, I see it as a win-win for actual Arch users
you literally cannot install an AUR helper without using the archwiki page for the AUR firstif you're dumb enough to use an arch derivative to dodge installing an aur helper manually and reading the manual, you're twice as dumb
>>109067168Ackchyually you can by installing octopi first, it makes the procedure automatic (but still gives you the equivalent of a "warning: radioactive shit, use it at your own risk!" disclaimer first)
>>109064091Arch and all of its spin offs are legit dogshit. I'm not even meme'ing, they are genuinely SHIT.Use a real Linux distro like Void, Slackware, Gentoo and stay away from the corporate take over slop like Pop, Fedora, Ubuntu, Debian
>>109067544You cant, if you need an income.So you are either debian or RHEL
>>109067544How the fuck is debian "corporate"? I may give you that external forces are working overnight for years to subvert it (and the current pajeeta head proposed to incorpote it in usa) but that only show how important this particular community driven project is, still debian isn't corporate yet.
>>109064141Blame that to normie-friendly arch-based distros like omarchy/cachy/steamos/batoceraPeople hve no idea what arch is and that it's not "some easier distro"
>>109067828You're replying to a brainwashed systemd hater, funny how they always expose themselves every time they try to trick gullible retards into using their meme distros
>>109067828>the current pajeeta head proposed to incorpote it in usasauce?
>>109067849Ironically i'm (the anon you replied to) the "systemd hater" here (i'm a devuan user), you got way offmark here pal.>>109067921I remember was one of her propositions in the past, i can't be bothered to trace it up because, ultimately, is just izzat bullshit. I don't think her current position allows for that.
>>109064141The real question is why those people want to use a distro that is meant for DIY and then want it to work out of the box. Those "easier" arch distros like cachy and even the archinstall script defeat the whole purpose of arch and turn it into an unholy mess. Arch is a hobby tinkerer distro and nothing else. It's like having an installer for LFS or using prebuilt binaries for Gentoo.It's even weirder that people see Arch as a badge of honor and want to become Arch users just to larp as some tech wizard.
I never really understood the AUR. The niche packages on there are really hit or miss, and more times than not you're just better off building something. I'm not a ricer or anything so maybe I just don't "get" arch.
>>10906409199% of "linux" bitching here is done by jeet wintards filled with senvy (Seething ENVY) for some unknown reason.luckily, their "feelings" have no relevance whatsoever.
I used Arch for 6-7 years and it was useful for learning Linux, but now I want stability and ease-of-use/install. Debian/Ubuntu/Fedora all are more professional and mostly just as up-to-date if you use Flatpak.