KssioAug

Yeah… I don’t know how the general public is using AI, but it’s definitely a very useful tool. I understand it comes with a lot of issues regarding privacy, content rights, and predatory mega corporation practices, but the tool itself is useful. And we don’t even need to rely on Google, Microsoft, OpenAI, Anthropic nowadays to use it. Open-weight models that run locally on open source agents are already pretty capable for a lot of daily tasks. I think a lot of people fail to understand is that it can be used responsible as a tool to help on tasks and automation instead of being a tool to be trusted blindly. I sure will not try to convince anyone to use it, specially if they don’t want to, but playing pretend that it’s a useless technology does not help either.

Nope. Distrobox does not offer any meaningful protection, since its purpose is to integrate with the system. It’s basically meant to make downloading and managing packages from different distros, on the same system, much easier… but it’s not meant to protect and isolate your device the same way that Flatpak or other type of containers do. That baing said, stop relying on Distrobox as a safety measure, and check your recently installed and updated packages since 9th June, to make sure you were not infected.

I was starting to get too confident in AUR. Thankfully I wasn’t affected. Just replaced all possible AUR packages to their respective Arch and Flatpak alternatives, with exception of very few or from the ones I had no option. But will definitely check before updating them, and will only install AUR packages as a last resort.

No. If it came from AUR, it doesnt matter the method you used. You should check all the AUR apps you recently updated (from 9th to 12th June), and compare it to the lists. Only AUR though… Arch official repos are not affected by it.