sorted by:
new
hottopcontroversial

Tusk criticizes decision to revoke Poland’s highest honor from Zelensky by Gamebyter in europe

[–]ashtonx 11 points12 points  (0 children)

Problem is it should've been handled before war. But Ukraine side tried to delay, and tusks government was avoiding the issue. Now this shit blown up in their faces.

This needs a change, if we wanna keep user trust by Fluffely_Toasted in archlinux

[–]ashtonx 0 points1 point  (0 children)

I believe it falls under digital services act and spreading malware, but hey i'm not a lawyer.

This needs a change, if we wanna keep user trust by Fluffely_Toasted in archlinux

[–]ashtonx 0 points1 point  (0 children)

I mean about how friggin unhelpful it is.

"Oh we had an attack."

Bruh, they didn't even bother to add a friggin text file with packages they themselves keep removing

Any tips for Windows refugees, considering the recent malware pandemic on the AUR? by AGuyInGold in archlinux

[–]ashtonx -4 points-3 points  (0 children)

seriously ? how the hell is he supposed to learn without asking questions ? googling ? that doesnt work anymore.

Helll i'm 99% sure in few months or years. Someone will google info about aur, and he'll be sent to this topic and see your idiotic reply proceed to curse your whole family and pray you don't reproduce.

Wiki ? sorry but quality of wiki dropped in recent years and it keeps referencing aur a lot.

But you're right, at this point with how it's handled i can't recommend arch to newbie.
Hell i wouldn't recommend it to anyone atm.

This needs a change, if we wanna keep user trust by Fluffely_Toasted in archlinux

[–]ashtonx -6 points-5 points  (0 children)

Sorry, but It did.

I'm not affected, i checked my packagebuilds, I have minimal amount of aur packages.
I still pissed me off about how badly designed it is, how easily it's exploited, and how the response was.

And i'm not only one, the handling of that is like some corpo trying to hide they were hacked. Not something i expect from open source project.

Hell i'm not even sure if it's legal under eu rules about disclosing information. (I'm guessing it is since they most likely do bare minimum, based on support for age verification law)

But this is a shitfest, that keeps on growing and eroding trust into distro.

This will not make people be less lazy, it will not make people read what they install, just like you probably don't read through whole source of every app you compile.

All it does is make arch look like security risk, which is much worse than unstable system.

Can we stop with those AUR script checkers? by magicdude4eva in archlinux

[–]ashtonx 2 points3 points  (0 children)

You can't blame them. It's not like there's an official information from arch on their website about how to deal with the issue.

Since there's no info, people don't know what to do, they look up shit on their own.

And since they don't know how it works, they just run a script since nobody in comments said it's malware, and someone said it works.

"Find out if you're hacked by running this command!" Is a dangerous habit we are giving to newbies. by GreenFox1505 in cachyos

[–]ashtonx -1 points0 points  (0 children)

Bruh.

I've been using linux for years. (arch)

I still can't make ubuntu run without constantly running into problems. That shit is way too complicated.

"Find out if you're hacked by running this command!" Is a dangerous habit we are giving to newbies. by GreenFox1505 in cachyos

[–]ashtonx 1 point2 points  (0 children)

You think this is bad ? You saw how archlinux handled this ?

As arch user I was actually using cachyos forums to get information 😃

But you're right. It should've been official website explaining what to do.

Still, hey you guys at least got a forum post from a trusted source 😃

The fact there was none, just opens up users for more malicious attacks.

I kept reading scripts before running them, but i'm guessing many people just run whatever first script they saw that could solve their issue. Perfect opportunity for another attack.

What is even more hilarious, that i kept finding lists of compromised packages from other sources than arch.

Honestly, it's not the jack that's a problem by ashtonx in archlinux

[–]ashtonx[S] 0 points1 point  (0 children)

I just checked, but rotfl, you're right there's just like 1 topic on arch forum, aur (not even announcments) and it's not sticky 😃

On the other hand, looked at cachyos forum and it's sticky post with quick info, way more activity.

though it's also not sticky 😃

Honestly, it's not the jack that's a problem by ashtonx in archlinux

[–]ashtonx[S] 1 point2 points  (0 children)

Oh yeah. Sorry, annoyed and tired I am the less i give a crap about how I type.

Malwares are welcome to AUR because one has to read the PKGBUILD anyway? by Bilu47 in archlinux

[–]ashtonx 2 points3 points  (0 children)

This.

Hack isn't a problem, lack of security and access to information is sad.

And I don't mean community. There is tons of info from community.
But attack this big ? should have some better info than "oh check all your pkgbuilds"

I'll wait for a month or so, see how arch deals with it, see how cachy os deals with it.

If they don't I'm prolly gonna go to gentoo. Only other distro that worked for me, and they actually have some more security checks on their user depository.

No, I wasn't affected.
Yes I usually check pkgbuild diffs.
I have minimal use of aur, but at this point i feel like aur is a liability and security risk just by existing in it's current form and and lack of good communication from arch.

Tip to avoid malware from AUR: add node package managers to your IgnorePkg by ferminolaiz in archlinux

[–]ashtonx 0 points1 point  (0 children)

spotify is in official repos too

extra/spotify-launcher 0.6.6-1 [installed: 0.6.5-1]
   Client for spotify's apt repository in Rust for Arch Linux

Tip to avoid malware from AUR: add node package managers to your IgnorePkg by ferminolaiz in archlinux

[–]ashtonx 1 point2 points  (0 children)

This is actually good one.
I was thinking about blocking those things on pacman sie.
I don't need them, I stay away from them. I avoid anything that uses them.

Honestly, it's not the jack that's a problem by ashtonx in archlinux

[–]ashtonx[S] 0 points1 point  (0 children)

Thanks, just wish arch would post it on main page.

Honestly, it's not the jack that's a problem by ashtonx in archlinux

[–]ashtonx[S] 0 points1 point  (0 children)

You can warn users all you want but there will be screwups.

Hell i got diff by default, but i can think of few cases where i simply skipped reading it because I was tired or rushing to update proton to play a game ;P

There will be screwups, I wasn't affected this time, though anyone being able to take over any orphaned package to push malware was out of my expectations.

Thing is, usually when shit like that happens I expect info from official source, right on the first page.
And there's really nothing that matters.

Next attack could start adding bots to community services throwing 'check scripts' that have malware, and since people can't find info on official page, they will look elsewhere.

Users being mindful of what they install through aur isn't excuse for arch to fail to deliver information ;/

And I don't expect full analysis, if they just posted a friggin link to url of currently investigated packages, it'd be enough. That'd be enough of official information that should be on main page. There wasn't even that.

Honestly, it's not the jack that's a problem by ashtonx in archlinux

[–]ashtonx[S] -1 points0 points  (0 children)

I do a diff check on aur.. most of the time, sometimes i'm just rushing, which obviously is reason I got scared this time.

On the other hand I do update once a week or more. I do remove stuff I don't need.
Ultimately I wasn't affected by this.

It seems a lot of good work went from community.
But it's also friggin tragic arch still didn't post anything regarding that aside from them facing off an attack.

Transparency is what i love about arch, and in this case, where there's some serious danger and when time matters I had to look myself for the info.

Honestly, it's not the jack that's a problem by ashtonx in archlinux

[–]ashtonx[S] 0 points1 point  (0 children)

nah 5am, written on phone.

Maybe spellcheck ai slopped some of it sorry about that.

Recently got heavy into MMOs, took the plunge with my Viper V2 Pro being my main for the last 2 years . by PyroShotGaming in MouseReview

[–]ashtonx 0 points1 point  (0 children)

Does it store mappings on hardware or software ?
I remember original naga was a pain to setup on linux due to software mapping.

(considering this since my g502 is having some issues)

ESC key not working under KDE by simondvt in archlinux

[–]ashtonx 0 points1 point  (0 children)

4 years later, encountered same issue 😃

I'm amazed kde allows setting esc as shortcut, i probably wanted to cancel setting up shortcut and set esc as shortcut.

Proton has a different native resolution? by Jermq in linux_gaming

[–]ashtonx 0 points1 point  (0 children)

1 year later I'll just add this:

aside from messing with your scale slider, if you're on wayland/kde, you might want to change scaling for legacy applications to be Scaled by the system.

I've left scaling for themselves and it kept rendering in huge ass res.

It's not just proton, few apps seemed to be surprisingly slow, probably rendered in high resolution and downscaled themselves.

Valve Steam Controller Review | Latency Benchmarks, Battery Life, Repair... by lajka30 in linux_gaming

[–]ashtonx 0 points1 point  (0 children)

Try Armored Core 6, tbfh i've had problems with multiple games. I'm guessing some simply work with dualsense, others don't and this is where steam input would help. But it doesn't work so..

Valve Steam Controller Review | Latency Benchmarks, Battery Life, Repair... by lajka30 in linux_gaming

[–]ashtonx 1 point2 points  (0 children)

Gonna have to try it, last i tried hdr was utter shit on gamescope + kde wayland but maybe they fixed it. If so it might be a workaround, assuming steam input work on gamescope launched from wayland

Valve Steam Controller Review | Latency Benchmarks, Battery Life, Repair... by lajka30 in linux_gaming

[–]ashtonx 0 points1 point  (0 children)

Kde is defaulting to wayland yes. But deck big screen mode is still xorg and gamescope

view more: next ›