rafssunny@lemmy.zip to Technology@lemmy.worldEnglish · 5 months ago400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealerscybersecuritynews.comexternal-linkmessage-square145linkfedilinkarrow-up1448arrow-down11
arrow-up1447arrow-down1external-link400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealerscybersecuritynews.comrafssunny@lemmy.zip to Technology@lemmy.worldEnglish · 5 months agomessage-square145linkfedilink
minus-squarecaseyweederman@lemmy.calinkfedilinkEnglisharrow-up1·5 months agoYou’re right, but web browsers can be pretty brutal to build and they are for sure never going to add -bin versions.
minus-squarestealth_cookies@lemmy.calinkfedilinkEnglisharrow-up4arrow-down1·5 months agoI don’t understand this argument. Isn’t it better to build once and distribute binaries than to make everyone compile it themselves? The vast majority of AUR packages I use are -bin versions.
minus-squarecaseyweederman@lemmy.calinkfedilinkEnglisharrow-up2·5 months agoYou don’t get to see the code that way, which is where bad actors thrive. Also it wasn’t compiled for exactly your system.
You’re right, but web browsers can be pretty brutal to build and they are for sure never going to add -bin versions.
I don’t understand this argument. Isn’t it better to build once and distribute binaries than to make everyone compile it themselves? The vast majority of AUR packages I use are -bin versions.
You don’t get to see the code that way, which is where bad actors thrive. Also it wasn’t compiled for exactly your system.