it’s bypassing the normal place to download (in the PKGBUILD) and doing so in a place that’s unsandboxed instead (in the .install file, not the PKGBUILD) when it didn’t need to do that before

that is indeed the official guides’ fault if they’re not in charge of helping maintain the AUR package. not the case for most of the infected packages here other than notably alvr, though.

windows update doesn’t force you to take a look at the changelog. most AUR helpers do so you better bet that it’s important

it’s a mailing list, so heads up, if you subscribe you’re also gonna get other discussion like the forums.

https://lists.archlinux.org/mailman3/lists/aur-general.lists.archlinux.org/

since the 2022 grub incident, Arch has done a great job at notifying the news channel when “manual intervention required” AFAIK, and I don’t remember any instances of Arch maintainers only notifying Reddit (and I don’t think they notified Reddit for the grub incident either lol).

the arch news channel is for breaking changes to arch pacakges (so not the AUR) only. maybe you could subscribe to aur-general@lists.archlinux.org.

(hopefully this doesn’t read as blaming the victims instead of the attackers but) I personally don’t think it’s that complicated to read the updates to AUR packages. It’s not any more hard than only commenting after reading the links that people post here instead of just the headlines—which we all do, right?

deleted by creator

well what you said after zir reply didn’t demonstrate any of that

that you write things i’m trying to understand the relevance of, like “This information wasn’t provided in the post.” and “the first comment points to btrfs”. The Reddit link you gave also points towards btrfs as well as very undetailed mentions of zfs. ze says “i’ve tried btrfs and it doesn’t work so i’m looking into zfs”, and you reply “use btrfs use btrfs or look into zfs”, a message whose helpfulness I struggle to understand.

the device I’m testing first is too small for btrfs

Yandex is Russia’s Google, sold in 2024 to Russian oligarchs with close state ties, so I’d say it’s justified to criticize this particular sponsorship business

ah i have had that happen before lol. it does copy spaces but it doesn’t overwrite your main clipboard so i don’t have qualms about it. every app you’d expect to support middle-mouse drag except notepad/gedit/kwrite/etc supports it instead of pasting unless you use chromium without the relevant extension or remain static over a textbox.

interesting; how does one copy from an empty field by accidnet? /geniunely curious and oblivious

but it’s quite intuitive to realize what it does

two have expressed interest in taking over: https://gitlab.gnome.org/GNOME/libxml2/-/commit/9c80a89af2fdf4f853892f84e46580f4902658ba#note_2626536

i do use arch

is April 2024 software that old?

replacement of core system utilities that aren’t ready for prime time

Could we talk about Unity? I’d wager that these bugs wouldn’t have been found by 2027 if Ubuntu hadn’t adopted sudo-rs. And I’d say “look at where Unity is right now” if they hadn’t switched to GNOME Shell.

there’s regular and then there’s LTS releases for a reason

One of the patches is to prevent the sudo password from being leaked in case of a timeout or sudo being killed. Another patch is to use enum for the feedback parameter. Another patch to ensure feedback is always erased before exiting the read unbuffered code. Another change is also made to not treat backspace as a password character when the password is empty.

In the memo, ahead of the campaign’s launch, executives grappled with whether to include public disclosures about “secondary” use – water used in generating the electricity to power its datacentres.

They warned that full transparency was “a one-way door” and advised keeping AWS’s projections confidential, even as they feared that their advice could invite accusations of a cover-up. “Amazon hides its water consumption” was one negative headline the authors anticipated.

Callaghan said efficiency savings have already been achieved and pointed out that other companies also don’t count secondary water use.

Scientists balked at the selective disclosure and the choice not to include secondary use of water in the total.