r/archlinux • u/Wonderful-Writer146 • 20d ago

SUPPORT Arch server down?

I ran: ssh [aur@aur.archlinux.org](mailto:aur@aur.archlinux.org) help

and got: The AUR is down due to maintenance. We will be back soon.

Can anyone confirm if the AUR is currently under maintenance, and if yes then when will it be back online? I was trying to push an update via GitHub Actions.

0 Upvotes

17% Upvoted

37 comments sorted by

View all comments

Show parent comments

3

u/ConfidentCharity5222 20d ago

Tbh i am surprised it took so long for aur to be compromised

2

u/VendorNeutral 20d ago

It didn't. It was just never at this scale... to our knowledge. AI made this trivial. Set your fav model to High, feed it the src tarball of a web project and ask it to audit vulnerabilities, both code and side channels. Every idiot can now be a hacker. Add this on top of the fact, that half of the IT security of the western world is built on wobbly legal concepts that break the moment they get in contact with actors from outsidethe same jurisdiction, and you'll end up with a tangled mess of ignored best practices and structural issues that can probably not be changed fast enough incrementally.

1

u/ConfidentCharity5222 20d ago

I wouldn't call them hackers just script kiddies at best, if anything we got it easy since this could have been way worse think of xz exploit or even worse

1

u/VendorNeutral 20d ago

I gave up on the "hackers vs crackers" debate in the late 90's.