The Arch Linux team has once again been forced to respond to a distributed denial-of-service attack targeting its AUR repository infrastructure. As a result, DDoS protection has been enabled for aur.archlinux.org to help mitigate the ongoing disruption.

While this measure helps keep the AUR website accessible, it has introduced a significant side effect: pushing to the AUR is currently not possible.

you are viewing a single comment's thread
view the rest of the comments
[–] 28 points 1 year ago* (6 children)

Nobody has been claiming responsibility. Some of the AUR forum peoples think it's butthurt malware devs who got caught uploading malware, but it's just a shot in the dark.

https://status.archlinux.org/

Been on and off for months now.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 1 year ago (3 children)

    I wonder if it could be a state actor? I can imagine that the powers that be in MANY countries could be motivated to keep users away from operating system software that isn’t spyware.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 1 year ago (2 children)

    Then why go against the AUR and not the official mirrors? The former isn't always exactly the epitome of securely packaged trusted applications

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 11 months ago (1 child)

    If it's blocking AUR updates, it could be an attempt to keep some patches to certain exploits from going out? But it seems unlikely that the cost of a ddos is worth the tiny number of possibly vulnerable AUR users out there...

  • source
  • parent
  • hideshow 1 child comment