kleeon [he/him, he/him]@hexbear.net to libre@hexbear.netEnglish · 4 months agoArch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attackwww.phoronix.comexternal-linkmessage-square55linkfedilinkarrow-up170arrow-down10file-textcross-posted to: arch@programming.devarchlinux@lemmy.mllobsters@lemmy.bestiver.se
arrow-up170arrow-down1external-linkArch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attackwww.phoronix.comkleeon [he/him, he/him]@hexbear.net to libre@hexbear.netEnglish · 4 months agomessage-square55linkfedilinkfile-textcross-posted to: arch@programming.devarchlinux@lemmy.mllobsters@lemmy.bestiver.se
Nearly 2000 packages affected now. I’m starting to become sceptical of pacakge managers as a concept.
minus-squarechgxvjh [comrade/them, he/him]@hexbear.netlinkfedilinkEnglisharrow-up4·4 months agoHonestly most software shouldn’t require regular updates to begin with.
minus-squareCalfpupa [she/her]@lemmy.mllinkfedilinkEnglisharrow-up1·4 months agoHow else do you handle security vulnerabilities and bugs?
minus-squarechgxvjh [comrade/them, he/him]@hexbear.netlinkfedilinkEnglisharrow-up2·4 months agoJust make better software to start with. Adding networking and software deployment to everything is a significant attack surface.
minus-squareCalfpupa [she/her]@lemmy.mllinkfedilinkEnglisharrow-up1·4 months agoUpdating software doesnt require networking or software deployment.
minus-squarechgxvjh [comrade/them, he/him]@hexbear.netlinkfedilinkEnglisharrow-up2·4 months ago having a self-update mechanism in your app does
minus-squareCalfpupa [she/her]@lemmy.mllinkfedilinkEnglisharrow-up1·4 months agoYour comment was definitely a broader scope than the rest of the conversation. Most software isnt self-updating.
Honestly most software shouldn’t require regular updates to begin with.
How else do you handle security vulnerabilities and bugs?
Just make better software to start with. Adding networking and software deployment to everything is a significant attack surface.
Updating software doesnt require networking or software deployment.
does
Your comment was definitely a broader scope than the rest of the conversation. Most software isnt self-updating.