Thread 105971333

which ones of you got raped by the AUR malicious packages in Arch Linux?

- librewolf-fix-bin
- firefox-patch-bin
- zen-browser-patched-bin
https://linuxiac.com/malware-discovered-in-arch-linux-aur-packages/

>>105971333 (OP)
nobody, because it got removed after 10 minutes

>>105971333 (OP)
one of the packages was called minecraft-cracked
literally who in the fuck would fall for this?

>>105971333 (OP)
Only the niggers/jeets that are unable to check the PKGBUILD of things they are installing.

You're supposed to at least skim PKGBUILDs before making them. most are quite short as well, is it that hard to check if it's downloading stuff from the website it's supposed to?
also is there an archived version of those pkgbuilds? I'd like to see how hard they tried to obfuscate it

>>105971333 (OP)
you would only install those on accident so unless you can read it's not an issue

i have never read a PKGBUILD in my life and i never will because i don't know how and i refuse to learn it

>>105971364
>literally who in the fuck would fall for this?
Retarded winfags who pirate all of their games. These "people" will literally disable their antivirus to install sketchy repacks.

>>105971549
these people are on linux mint at best.

>>105971333 (OP)
How would anyone even find these packages and why would they install them? Malware masquerading as known programs is a tale as old as time, and this isn't even a particularly convincing implementation. You would either need to be searching for binaries to patch your browser with (for some reason) or hear about these patches elsewhere and then install them. I'm confident the amount of retards who somehow found and installed these packages is in the single digits. Honestly it's about the same as finding a fake Firefox exe on windows in the browser, but perhaps harder because SEO isn't a thing.

>>105971333 (OP)
Linux users are just as retarded as Windows users. No-one is special.

>>105971364
>who would fall for this?
There's no evidence anyone did. It's just ragebait so people can shitpost against arch or assume people they don't like downloaded these packages and then use their assumption to call said group retards.

>>105971555
Some of them install Arch because it's good for gaming (newer packages). They've brought Arch back to the 00s years when it was a distro used mainly by dumb kids who ran everything as root.

>>105971549
Why does anti virus software almost always detect cracks as malware anyway?

>>105971333 (OP)
>- librewolf-fix-bin
>- firefox-patch-bin
>- zen-browser-patched-bin
Nobody installed these. Nothingburger.

>>105971452
Some people use shit like yay and don't read the pkbuilds lol.

>>105971333 (OP)
I am a pirate and I use Arch. Alhamdulilah

>>105971452
>You're supposed to at least skim PKGBUILDs before making them. most are quite short as well
Literally just scanning for URLs and making sure they all match the github you're pulling from is usually good enough.
>>105971807
yay shows PKGBUILDs before it will will install. You can close them without reading them but at that point, you're really just asking for it and it's your fault.

most obvious malware package name award

>>105971439
What a coincidence, only niggers use Arch

>>105971333 (OP)
Arch is a fucking joke and I will always say it's a fucking joke

>>105972448
no it's not

I don’t use the AUR, I don’t have the want need or computing power to. So I got pretty lucky.

nobody will post their pacman -Qqm so im going to assume literally nobody here uses arch.

>>105971585
If I use both am I twice as retarded or half as retarded

NOBODY installed those, and they were caught within a day

>>105971343
>The issue came to light on July 16 when a user uploaded a malicious package, librewolf-fix-bin, to the AUR. Within hours, two more packages—firefox-patch-bin and zen-browser-patched-bin—followed, all traced back to the same bad actor.
>By July 18, all three malicious packages had been removed from AUR.
a tad bit more than 10 minutes

>>105974120
It's just boring. Here you go. Enjoy. No idea why phonon is even on there, considering it's pulled by KDE.

>>105971333 (OP)
>muh packaging is so much better and more secure
>installs 2000 packages from random chuds instead of the developers
every "pro" of using linux is actually a con

>>105971333 (OP)
i don't use arch btw

>>105971333 (OP)
linux is a thread to the ai surveillance they put in microsoft and apple.
glowies & co up their 'linux is bad' narrative, start adding malware packages to popular distro's.

imagine being a glowie.
like a dog who's told "you're such a good boy" by its government.
what a pathetic existence.

>>105971439
implying it's not a jeet that pushed this to make garuda look better