Why in the earth would someone DDOS AUR?

fijarom · 2025-08-14 21:35:30

Just why? I just don't see the point. Lately, there been a couple of viruses that got found in AUR. I can understand them, they have an understandable reason and benefit for attackers. But DDOSing AUR? Why in the world would someone DDOS AUR? What's even the point? You crashed it for a couple of hours, so what? What did you even earn from that?

I swear some people just have too much time, so much so they don't even know how to waste it. Really pathetic.

mpan · 2025-08-14 21:55:04

There is a thread on that subject: best to join there.

If by virus you mean malware, there is no “recently” in this. Nothing out of order happened in the recent AUR history. Malware uploads to AUR are a normal, constant thing continuing since forever.

For the motives ask whoever does that. Everybody else is clueless. Imagining hypothetical scenarios, which are neither based in what we know nor verifiable, serves no purpose. And neither does insulting the attackers: they don’t care what you think, unless seeing you agitated is their goal.

fijarom · 2025-08-14 23:03:06

Thanks for the link, I completely missed it.

I know there were other malware incidents in AUR before yet I feel like it recently became quite more common to see. I used to see less and less malwares in AUR but nowadays it hit the spotlights of internet I guess.

No insults towards anyone from me. I just pity them because this is just a waste of time for everyone, including them.

mpan · 2025-08-15 08:26:56

Looking 10–15 years in the past, I don’t see it becoming more common. Nothing beyond “seasonal fluctuations.”

The only thing, that happened recently, is a snowball effect after some journalist invented a narrative to gain clicks.

For comparison, in the past month Arch users experienced trouble much greater than DDoS and year’s worth of malware combined. Counting by the people, who seeked help.

Yes, the situation is a hurdle. But you’re writing on the forum while it experiences the attack. Did you even notice?

Last edited by mpan (2025-08-15 08:43:00)

cryptearth · 2025-08-15 10:31:28

I guess hiding malware in popular software is a thing older as the internet - the difference in open source is just that everybody can look through the source and every now and then some skilled devs find something - sometimes even just out of pure luck as for XZ (if you not read up: the one who found it was confused by something taking about half a second longer then usual - something most of us likely have nevr noticed)
and sure - sometimes some malware finds its way into official releases not because of the devs doing something wrong but because the build system got infected and adding bad code without the devs knowledge

tldr: even if you strictly building from source only unless you are able to read through all the code and have the skill to understand it - at some point you always have to trust someone at least to some point that whatever binary results from given source doesn't end up in malicious crap - at the very least the compiler unless you learn how to build your own toolchain all they up from raw binary - and even then the infection can happen on your system and everything you build gets infected

is it good to stay suspicious? yes - but at some point it end up in pure paranoia

vrecek · 2025-08-15 11:52:51

So thats what happening right now? Im getting "connection reset by peer" error just before finalizing the upgrade. More coincidentally, yesterday I pacman -Syu'ed, today i wanted to do the same with AUR packages, at first I thought, the upgrade messed something up...

It seems kinda special, because it never happened during my 4 year Arch installation(s)

Last edited by vrecek (2025-08-15 11:54:33)

gromit · 2025-08-15 12:17:57

There is an initial "connection reset" due do the TCP SYN Authentication done by our Hosting provider... Subsequent request should then pass through.

fijarom · 2025-08-15 14:17:15

mpan wrote:

For comparison, in the past month Arch users experienced trouble much greater than DDoS and year’s worth of malware combined. Counting by the people, who seeked help.

I don't think comparing the problems we have and saying this one is worse than the other is a good idea. A problem is a problem whether it's a major one or not, we all are here to solve it.

mpan · 2025-08-15 14:46:32

fijarom wrote:

I don't think comparing the problems we have and saying this one is worse than the other is a good idea.

This is why I was clear, by what measure is it “worse.”

fijarom wrote:

A problem is a problem whether it's a major one or not, we all are here to solve it.

Strictly speaking not “we all.” Neither me nor you are solving anything here.

Infra people are working to solve that. And so far they’re doing great.

Last edited by mpan (2025-08-15 14:48:50)

fijarom · 2025-08-15 15:25:10

mpan wrote:

This is why I was clear, by what measure is it “worse.”

None isn't worse than any other, a problem is a problem. That's why I say there is no point to compare them.

mpan wrote:

Strictly speaking not “we all.” Neither me nor you are solving anything here.
Infra people are working to solve that. And so far they’re doing great.

*We* as a community, not as individuals.

Allan · 2025-08-15 23:06:38

fijarom wrote:

mpan wrote:
Strictly speaking not “we all.” Neither me nor you are solving anything here.
Infra people are working to solve that. And so far they’re doing great.
*We* as a community, not as individuals.

Not sure how the community is helping. Maybe stop being assholes across the internet and stop the ridiculous "I use Arch BTW" crap so the distro is less hated and not as much of a target.

Succulent of your garden · 2025-08-15 23:31:58

Allan wrote:

Maybe stop being assholes across the internet and stop the ridiculous "I use Arch BTW" crap so the distro is less hated and not as much of a target.

Well not too much you can do about that. But I must say that I love this forum so much, because is the totally opposite of what stupid people believe is the quintessence of the arch linux user, which spread in the form of a fat virgin person among other things, but go outside of main and official arch linux and you start to see that crap. There are also the factor that some youtubers/influencers spread the "memes" to obviously gain more views and create in someway the hate at the end. In the end just kids in the body of an adult.

But why I'm writing this ? To in some way say thank you so much to the infra team and the developers, I know that here are some in the post thread, but to everyone: thank you so much for the work. I hope someday I can have the time and knowledge to help you and share some help in the work. I understand that in the end is not the users who are helping and making the hard work. Maybe one way to mitigate the wrong perceptions of arch linux is to simple say go and check the official forum, you can see that there are great and normal people working in the project, and in many times with a good sense of humor.

Last edited by Succulent of your garden (2025-08-15 23:34:41)

fijarom · 2025-08-16 14:46:41

Allan wrote:

Not sure how the community is helping. Maybe stop being assholes across the internet and stop the ridiculous "I use Arch BTW" crap so the distro is less hated and not as much of a target.

Yeah mate, I'm spamming "I use Arch BTW" in the official Arch forum just because how much I want to flex my use of Arch. Dear god. The reason I'm saying *we* because believe it or not, Arch is where it is because of its community. I'm not saying this to belittle the developers' work but neither them or the community couldn't do it alone.

Unlike what you see in the Internet nowadays, Arch community is both very helpful and very diverse. You can see all kinds of people in it. My experience in many years was pretty much always positive. So at this point, I don't care what some influencers or people who don't know what pacman is say about Arch. And you also shouldn't. No one should.

Head_on_a_Stick · 2025-09-01 19:18:01

Is this not just https://gitlab.manjaro.org/applications … ssues/1017 all over again?

gromit · 2025-09-01 19:36:13

Head_on_a_Stick wrote:

Is this not just https://gitlab.manjaro.org/applications … ssues/1017 all over again?

No it is not.

Arch Linux

#1 2025-08-14 21:35:30

Why in the earth would someone DDOS AUR?

#2 2025-08-14 21:55:04

Re: Why in the earth would someone DDOS AUR?

#3 2025-08-14 23:03:06

Re: Why in the earth would someone DDOS AUR?

#4 2025-08-15 08:26:56

Re: Why in the earth would someone DDOS AUR?

#5 2025-08-15 10:31:28

Re: Why in the earth would someone DDOS AUR?

#6 2025-08-15 11:52:51

Re: Why in the earth would someone DDOS AUR?

#7 2025-08-15 12:17:57

Re: Why in the earth would someone DDOS AUR?

#8 2025-08-15 14:17:15

Re: Why in the earth would someone DDOS AUR?

#9 2025-08-15 14:46:32

Re: Why in the earth would someone DDOS AUR?

#10 2025-08-15 15:25:10

Re: Why in the earth would someone DDOS AUR?

#11 2025-08-15 23:06:38

Re: Why in the earth would someone DDOS AUR?

#12 2025-08-15 23:31:58

Re: Why in the earth would someone DDOS AUR?

#13 2025-08-16 14:46:41

Re: Why in the earth would someone DDOS AUR?

#14 2025-09-01 19:18:01

Re: Why in the earth would someone DDOS AUR?

#15 2025-09-01 19:36:13

Re: Why in the earth would someone DDOS AUR?

Board footer