Key Info
dax predicts the AUR (Arch User Repository) will at some point suffer a critical supply chain attack and says it needs a different authentication mechanism.
Highlights
- Says he does not know how to reach the AUR maintainers about the issue
- Raises the question of whether publishers should simply stop publishing there
- Frames the current auth mechanism as the core weakness
- No specific incident, timeline, or technical detail is provided