Spyke

Replies

linux

Comment on

AURpocalypse now: a look at the recent AUR attacks

Reply in thread

If people want to provide a package with certain modifications, just let users get it off your git repo and build it themselves with the proper instructions. It's not that much safer, but just enough that it should prevent this kind of widespread problem.

That's already the recommended path.

It really should be shut down for Arch's sake.

A long time ago I chose openSuSE over arch because of (among other) me being concerned with the lax use of the AUR by the community. One should just be somewhat mindful of what that thing is -- it is pretty much the equivalent of clicking links on the web to download software for Windows. I think it should be used for what it was supposed to be.

The AUR was created to organize and share new packages from the community and to help expedite popular packages' inclusion into the extra repository.

Maybe arch should adopt something akin to open build service and openqa to more quickly grow the extra repository which then can be monitored better?

linux

Comment on

Another help me choose a distro

Reply in thread

I am using openSuSE for production at work, and also on my private main machine. The "killer-app" that makes this distro outstanding is snapper (for snapshot rollbacks), which is tightly integrated. It has a rather steep learning curve somewhere between mint and arch. But it is probably the most mature and stable rolling release distro out there.

Comment on

Leap 16 is out now!

Yay! I'm gonna install it tomorrow and cross-grade from Tumbleweed. Do we have a post-install advice already? I know I'm gonna switch to apparmor because I have a job that keeps me from learnig SEL...

You reached the end