Strit

And you can check the shasum of the binary to see if it actually matches that provided by the developers of the application.

A malicious PKGBUILD, which is what is being talked about, you would see that it downloads a binary that does not come from the developers and so you should not install that.

If the attack happens on the developers repo, not even Linux repository packages would be safe at that point (eg, the xz heist).

Rarely, but I check the PKGBUILD to see if the binary is what I expect it to be.

But if you read the PKGBUILD, you would see that it downloads and runs a black-box binary and should therefore not install it. It’s a little harder with PPAs I think. The build files are not so easily found.

Looks like a really neat tool though. If you often work in multiple SSH sessions it seems really handy. :)

Disclaimer: Claude and Cursor has done at least some of the work.

You could add a simple startup script that just issues this command when the system is booted.

Still one of the best out there!

HedgeDoc also seems like an option that could do some of this. Self-hostable and open source (last I checked).

You do have the choice to simply not use the AUR. Has nothing to do with using Arch or not.

And no one has ever claimed the AUR to be safe.

Which is why users are recommended to audit the PKGBUILD and related files before building and installing the packages. In the end, what happens during the installation of AUR packages are the users responsibility.

Start with a regular sudo pacman -Syu. Is that slow?

If not, then it’s an AUR package that takes a while.

If it is also slow, then check your mirrors. The one you have first in the list, might be having issues.

Last I tried Plasma Mobile, the only password it uses is the user password. So the PIN is the user password for your user.

I don’t know if they have added an option to use a shorter PIN in the last couple of years.

Professional Server grade distro, would probably be either Ubuntu, Red Hat Enterprise Linux or OpenSUSE Enterprise Linux.

For my personal homelab server I run Arch Linux, but I wouldn’t do it in an enterprise.

But its software freeze was a couple of months ago.

Sure. But you have to figure that out first.

I’m just saying. It’s not for everyone. I feel too limited when trying immutable stuff, so I stick with my classic. 😀

But a simple thing like “install a random cli tool to run on host” is often not easy on immutable distros, so it’s usually just more convinient with an oldschool distro in those cases.

To be honest. Immutable distros are not for everyone. Tinkerers especially would not be suited to use them, because of all the “restrictions” in place.

Better to find another distro in that case.

I believe it also generates menu entries (.desktop files) for them.

What OS do they maintain? Linux is not an OS, but a kernel that powers many different OS’s, even Android.

Qt 6.11. That’s what is in Arch’s KDE-Unstable repository at least.