I mean, nobody is saying there is no way to prevent this, and I would hardly say that “twice” can be cathegorized as regularly.
Also I find this of extremely bad taste as you seem to compare this to school shootings, with literal children deaths. I would say that a few thinkerers getting pwned from their claude tokens is a couple orders of magnitude less serious.
Besides all the other non infected ways to install the software, there is a way to prevent this: Just read the AUR package before install and don’t trust blindly any new maintainer.
Isn’t this similar to the reason a lot of people hate snaps? Or am I misunderstanding something? I’m not an Arch user (btw) so I’m not super familiar with AUR.
Some of the hate for snaps is because it’s Cannonical trying to use its install base (Ubuntu) to push a particular format on the entire community as a vector for control
No way to prevent this, says only repo where this regularly happens
I mean, nobody is saying there is no way to prevent this, and I would hardly say that “twice” can be cathegorized as regularly.
Also I find this of extremely bad taste as you seem to compare this to school shootings, with literal children deaths. I would say that a few thinkerers getting pwned from their claude tokens is a couple orders of magnitude less serious.
Not the only repo, see: npm
Npm doesn’t let you easily take over packages you don’t own.
but does let you take over their maintainers’ accounts (through poor security) and easily poison them
Not more easily than anything else.
Besides all the other non infected ways to install the software, there is a way to prevent this: Just read the AUR package before install and don’t trust blindly any new maintainer.
It’s metaphysical approach to security. Enshrined rules that can’t be enforced don’t define user’s behavior.
Isn’t this similar to the reason a lot of people hate snaps? Or am I misunderstanding something? I’m not an Arch user (btw) so I’m not super familiar with AUR.
Some of the hate for snaps is because it’s Cannonical trying to use its install base (Ubuntu) to push a particular format on the entire community as a vector for control
You’re right on malware finding its way onto the Snap Store. I find it hilarious to see that the employed tactics are basically identical 😜.
However, FYI, the hate on Snaps is a lot more broad than that.