tired_fedora

Higher stakes

LOL 🤭 quiet, mafia, IT is talking!

They’re basically playing Russian Roulette with their servers. They condition a remove all command on a random numbers generator and pray. If it does not wipe the server, it spits out “Lucky Boy”

Broken link

TLDR: Open package repositories without some approval and oversight system, like AUR, will have even more problems in the future due to advanced coding AI and malicious foreign hackers.

Edit: Please normalize TLDR’s on bot posts with just a link.

Edit 2: I have been rightfully informed that this is not a bot post. I still think links should not be posted without a tiny abstract, one might say: a TLDR.

I have also been informed that the text does not spell out “foreign”. This is correct. The text does say

Not all of the packaging issues are as bad as the initial wave of trying to steal credentials, some are just adding ridiculous messages in Russian.

This implies but does not establish the nationality of attackers. While Arch has contributors from all over the world, it is commonly cited as being a Canadian distribution (example, see below). https://distrowatch.com/table-mobile.php?distribution=arch

If Chromium becomes incompatible with privacy, the only real and broadly accepted alternative is FireFox. Which implementation, and as always in these kinds of discussions, that depends on your threat model: On desktop, I am very happy with LibreWolf. Mullvad Browser is also great, especially with Mullvad VPN, though it breaks pages a little more often than LibreWolf. On Android, I am quite happy with IronFox.