kleeon [he/him, he/him]@hexbear.net to libre@hexbear.netEnglish · 4 个月前Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attackwww.phoronix.comexternal-linkmessage-square55linkfedilinkarrow-up170arrow-down10file-textcross-posted to: arch@programming.devarchlinux@lemmy.mllobsters@lemmy.bestiver.se
arrow-up170arrow-down1external-linkArch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attackwww.phoronix.comkleeon [he/him, he/him]@hexbear.net to libre@hexbear.netEnglish · 4 个月前message-square55linkfedilinkfile-textcross-posted to: arch@programming.devarchlinux@lemmy.mllobsters@lemmy.bestiver.se
Nearly 2000 packages affected now. I’m starting to become sceptical of pacakge managers as a concept.
minus-squarechgxvjh [comrade/them, he/him]@hexbear.netlinkfedilinkEnglisharrow-up2·4 个月前Just make better software to start with. Adding networking and software deployment to everything is a significant attack surface.
minus-squareCalfpupa [she/her]@lemmy.mllinkfedilinkEnglisharrow-up1·4 个月前Updating software doesnt require networking or software deployment.
minus-squarechgxvjh [comrade/them, he/him]@hexbear.netlinkfedilinkEnglisharrow-up2·4 个月前 having a self-update mechanism in your app does
minus-squareCalfpupa [she/her]@lemmy.mllinkfedilinkEnglisharrow-up1·4 个月前Your comment was definitely a broader scope than the rest of the conversation. Most software isnt self-updating.
Just make better software to start with. Adding networking and software deployment to everything is a significant attack surface.
Updating software doesnt require networking or software deployment.
does
Your comment was definitely a broader scope than the rest of the conversation. Most software isnt self-updating.