libre

10206 readers

1 users here now

Welcome to libre

A comm dedicated to the fight for free software with an anti-capitalist perspective.

The struggle for libre computing cannot be disentangled from other forms of socialist reform. One must be willing to reject proprietary software as fiercely as they would reject capitalism. Luckily, we are not alone.

libretion

Resources

Free Software, Free Society provides an excellent primer in the origins and theory around free software and the GNU Project, the pioneers of the Free Software Movement.
Switch to GNU/Linux! If you're still using Windows in $CURRENT_YEAR, take Linux Mint for a spin. If you're ready to take the plunge, flock to Debian and design your dream system!

Those on Apple Silicon Macs can consult Asahi Linux for available options.

Rules

Be on topic: Posts should be about free software and other hacktivst struggles. Topics about general tech news should be in the technology comm or programming comm. That doesn't mean all posts have to be serious though, memes are welcome!
Avoid using misleading terms/speading misinformation: Here's a great article about what those words are. In short, try to avoid parroting common Techbro lingo and topics.
Avoid being confrontational: People are in different stages of liberating their computing, focus on informing rather than accusing. Debatebro nonsense is not tolerated.
All site-wide rules still apply

Artwork

Xenia was meant to be an alternative to Tux and was created (licensed under CC0) by Alan Mackey in 1996.
Comm icon (of Xenia the Linux mascot) was originally created by @ioletsgo
Comm banner is a close up of "Dorlotons Degooglisons" by David Revoy (CC-BY 4.0) for Framasoft

founded 5 years ago

MODERATORS

context@hexbear.net

hello_hello@hexbear.net

Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack (www.phoronix.com)

submitted 2 weeks ago by kleeon@hexbear.net to c/libre@hexbear.net

53 comments fedilink hide all child comments

Nearly 2000 packages affected now.

I'm starting to become sceptical of pacakge managers as a concept.

you are viewing a single comment's thread
view the rest of the comments

[–] trompete@hexbear.net 14 points 2 weeks ago* (last edited 2 weeks ago)

I mean regular Linux package managers are better than the AUR, which is sort of a worst case.

I'll use Debian as an example: New maintainers need their identity verified, they usually get a sponsor looking over their shoulder while they're still learning, and they get quizzed on their ability. Maybe, after jumping through these hoops, they'll be able to take over an orphaned package or two, or create a new package, which then takes weeks to propagate from "unstable" to "testing", which then takes many months to freeze into "stable", which is when most people would finally be able to install it via apt.

Meanwhile in AUR-land: Random person can just take over an orphaned package (or 1500 orphaned packages) via a fully automated process, and minutes later everybody gets to install that.