Pulse of Truth

1385 readers

169 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth@infosec.pub

Arch Linux users told to purge Firefox forks after AUR malware scare (www.theregister.com)

submitted 4 days ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

4 comments fedilink hide all child comments

The distro's greatest asset is arguably also its greatest weakness If you installed the Firefox, LibreWolf, or Zen web browsers from the Arch User Repository (AUR) in the last few days, delete them immediately and install fresh copies.…

you are viewing a single comment's thread
view the rest of the comments

[–] Lazycog@sopuli.xyz 8 points 4 days ago (1 children)

I appreciate the article explaining the AUR repository. I'm still a linux noob and always thought AUR is the official repo for arch based distros.

[–] Tim_Bisley@piefed.social 4 points 3 days ago (1 children)

I was learning too and I was trying to wrap my head around the security implications of the AUR. It's like ok don't run anything new without votes and comments but you are still running random scripts. I suppose it's not much different from running an exe file but in windows you have anti virus. On Linux you are the anti virus apparently.

[–] Lazycog@sopuli.xyz 2 points 3 days ago

Yeah the debate on whether linux would need an antivirus is bit difficult. I feel like experienced linux users forget that there is a huge amount of people between "I only need browser and libreOffice" and "I can confidently review the source code and scripts of a package" that want to switch to linux.

I know the first line of defence is you, the second is linux permission system, but the third is missing to my limited knowledge.

Ny understanding is that ClamAV is for scanning windows viruses on linux and don't know about any other linux virus scanning software. The userbase growing is bound to bring more linux desktop targeted malicious software.