It's so over for archsisters

It's so over for archsisters

arch姐妹党彻底完蛋了

图片: https://i.4cdn.org/g/1785614902938559.png

>>109430745

He allowed literal malware into the AUR. He deserves far worse.

他把纯恶意软件放进了AUR。他活该更惨的下场。

>>109430766

There is literal malware on Flathub, yet no real complaints from the Arch userbase.

Flathub上也有货真价实的恶意软件，Arch用户群却没啥真抱怨。

>>109430745

AI replaces him easily.

AI轻松替代他。

>>109430766

>allowed

isn't AUR user generated? or did he explicitly refuse to moderate known malware after it was reported?

AUR不是用户生成的吗？还是他明知道是已报告的恶意软件还拒绝管？

>>109430809

Example?

>>109430745

>it's a good time to let go

>是时候放手了

yeah, good time when everything is going to shit

是啊，正好赶上一堆烂事的时候放手

also this is more than enough past point where you actually now start needing good old antivirus solutions on linux

而且现在早就过了那个点，你开始在Linux上真的需要老式杀毒软件了

>>109432268

https://flathub.org/en/apps/com.discordapp.Discord

>>109432562

Touche

>>109432268

Spotify is literally on the front page when browsing Flathub with Discover

用Discover浏览Flathub时，Spotify就直接挂在首页上

And Discover tempted the user to "Add Flathub", because of course KDE believes that adding non-free software is acceptable

而且Discover还引诱用户去“添加Flathub”，因为当然KDE觉得加入非自由软件是可以接受的

Arch has not fixed this problem yet

Arch还没解决这个问题

>>109430745

>TPMs Secure Boot and related

>TPM、Secure Boot之类的

good riddance

谢天谢地

>>109430745

>tpm

>secure boot

>安全启动

>related securities

>相关的安全功能

Ah so it's Microsoft the one behind the attacks to the AUR and Arch Linux

啊，所以是微软在背后搞AUR和Arch Linux的攻击

图片: https://i.4cdn.org/g/1785647613783292.jpg

>>109432302

>needing good old antivirus solutions on linux

>在Linux上需要老式杀毒软件

I hope you're joking. Right?

我希望你在开玩笑。是吧？

>>109430745

They lost when they removed xlibre page. Dishonest clowns.

他们删掉xlibre页面那一刻就输了。不诚实的小丑。

>>109430766

Malware in AUR is your responsibility not theirs.

AUR里的恶意软件是你们自己的责任，不是他们的。

>>109430745

>among the Arch Linux packages now in need of a new maintainer include the likes of mkinitcpio, Bolt, nvme-cli, Go-Tools, Pacman, arch-install-scripts, archlinux-keyring, archlinux-repro, and others. He was also the sole maintainer of WPA_Supplicant, fsverity-utils, and other packages.

>在Arch Linux的软件包中，现在需要新维护者的包括mkinitcpio、Bolt、nvme-cli、Go-Tools、Pacman、arch-install-scripts、archlinux-keyring、archlinux-repro等。他还是WPA_Supplicant、fsverity-utils等软件包的唯一维护者。

so uhhhhhhhh what now

所以呃呃呃呃呃现在怎么办

>>109437351

Don't worry friend! We'll just more these incredibly important system critical security packages to the AUR! Make sure to read the pkgbuild ;)

别担心，朋友！我们就把这些极其重要的系统关键安全包挪到AUR去吧！记得读一下pkgbuild哦 ;)

图片: https://i.4cdn.org/g/1785682735720213.jpg

>>109434183

>run arch linux

>跑Arch Linux

>enable full disk encryption

>开启全盘加密

>store key in the tpm to automatically decrypt the device on boot

>把密钥存在TPM里，开机时自动解密设备

>create a signing certificate

>生成签名证书

>sign the unified kernel image

>给统一内核镜像签名

>add the certificate to the uefi firmware

>把证书加到UEFI固件里

>enable secure boot

>启用安全启动

>microsoft at no point involved

>全程没微软什么事

图片: https://i.4cdn.org/g/1785683389096838.jpg

>>109432302

i will laugh so hard when they start selling OEM integrated HP linux desktops with McAfee pre-installed

等他们开始卖预装McAfee的惠普OEM Linux台式机的时候，我会笑死

>>109430766

>>109438088

>has no idea how anything works

>完全不懂任何东西是怎么运作的

contribution to 4chan: worthless

对4chan的贡献：一文不值

>>109432000

>isn't AUR user generated?

>AUR不是用户生成的吗？

yes

>>109438088

>OEM integrated HP linux desktops with McAfee pre-installed

>预装McAfee的惠普OEM Linux台式机

They don't already?

他们已经这么搞了？

>HP

Oh wait, that wouldn't be even needed. The entire system and brand is bloatware incarnate.

哦等等，那根本没必要。整个系统和品牌就是臃肿软件的代表。

>>109430745

>spend 10 years coasting on the security team since arch linux is a niche distro only used by a few tech autists

>花10年靠安全团队混日子，因为arch linux是个小众发行版，只有少数技术宅用

>unexpectedly, it starts to pick up steam among normies

>没想到，它开始在普通用户中火起来了

>as expected, malware starts to sneak into the AUR

>果然，恶意软件开始混进AUR

>"lol not my problem, skill issue, it's your responsibility to read every single PKGBUILD and read through countless diffs every single time you update"

>“哈哈不关我事，技术问题，每次更新都得自己读每个PKGBUILD和无数diff是你的责任”

>as expected, AUR eventually gets hit by a massive malware attack and people call for stricter security measures

>果然，AUR最终遭到大规模恶意软件攻击，人们呼吁加强安全措施

>"lol still not my problem, skill issue", implements a half-assed solution by tightening account creation somewhat

>“哈哈还是不关我事，技术问题”，搞了个半吊子方案，稍微收紧一下账号注册

>ANOTHER massive attack happens

>又发生了一次大规模攻击

>"lol i quit"

>“哈哈我辞职了”

i sincerely hope this guy isn't actually employed in a security role anywhere

我真希望这家伙没在任何地方干安全相关的活儿