dj_mc_merlin
Joined 6 years ago
Joined 6 years ago
This doesn't mean anything since "who they say they are" is an anonymous username with no real life correlation. Might as well be completely anonymous.
> that other people (the distro maintainers) believe that author to be the correct entity
No? Anyone can make an account and upload to AUR and it has exactly 0% to do with the distro maintainers. Packages can be removed if they're malicious, but websites can also be removed via browser-controlled blacklists (which I don't like btw but it's how it works nowadays).
> And any such compromise would, by definition, affect all users of the repo and presumably be detected by them and not by you in the overwhelmingly common case.
This is true of a popular website that advertises install instructions using curl | bash as well.
I've been using Linux for the past 2 decades and my general experience is that it is in no way more secure than Windows or Mac, just way less popular and with a more tech savvy userbase.
You can just ask them if they reviewed it in detail.
To rephrase: things are so bad they can't get worse. But the beauty of life is that they always can!
This is rooted in the assumption that capitalism provides what people want, rather than the worst that they will still accept. Endlessly cutting costs and then blaming the tastes of the consumer is why people put out anti-corporation pieces like the original video. That is not to say that Sysco is not operating logically.. but if the best move in a system leads to an unfavourable outcome for those that should benefit from it, then the system itself is the problem. Or another way to phrase it: there is a reason why that video resonated with many people that goes beyond trying to blame others for your problems.