Bananskal

Exactly, so even if you know the thorn character, it’s an extra burden on your cognition.

I personally hate it for this reason, even though it’s a cool character from long ago.

I don’t think the thorn character helps against AI btw, unfortunately.

Hey, happy first Lemmy cake day.

Welcome to Lemmy!

the diff is noise in the potentially big update log. the point of doing it manually is forcing you to take your time and verify stuff one by one.

I guess it depends on your discipline. If I’m already so inclined that I’d go to the lengths of forcing myself to check each package “manually”, I’m also going to be so disciplined to check each diff when paru pauses the upgrade process for me to do so. It’s the same thing for me.

also pkgbuild is just one place, seeing the hash changed means nothing if you don’t check what that archive contains, or seeing the install steps don’t change mean very little when the installer invokes other scripts anyway

Yup, and as I said, that’s where I draw the line with my trust and my threat level. I don’t have a lot of important data.

i understand that you aren’t going to vet the source itself, but at that point you are exposing yourself to this kind of malware without mitigation. the aur is unsafe by design (fast way to publish a package without any involvement from anyone else) and should be avoided whenever possible. im not an arch hater, i too run arch

Yup, I’m aware of the risks I’m taking. 🙂 That’s the important part to me. I really don’t have time to vet sources with two small kids and a full-time job, and hobbies and exercise every week. It’s impossible, and a sacrifice I’m willing and forced to make if I want some life balance. Quite a simple choice.

Ah right, perfect. Thanks!

paru shows you the PKGBUILD diffs on upgrade, so you can review then and deny upgrades.

But realistically I am not going to go into the code itself on my installed packages to check for malware or other types of attacks. That’s too time consuming for my risk level, and requires more knowledge than can be expected, to be honest.

Edit: but maybe you’re talking about when first installing a package? Come to think of it, I’m not sure it shows the PKGBUILD at that point. 🤔

I was wondering why you felt that way 😅 Usually this source produces good content lol

I think what they’re saying is you need to find the small things that add up to a life worth living for you.

I’m here if you wanna brainstorm some shit.

Sounds like this is a change for the better, eh. 😮‍💨

No worries! Once I got the meaning, the brevity makes it funnier. 😆

Yeah, it’s pretty baffling… One of my two life mottos is “hard hard could it be!”

Thanks! 🙏

I knew I should’ve waited until I hadn’t just woken up before trying to understand the comment. 😆

So this is what the Seminal Theory is about. It’s not a meteor or some shit that crashed into the earth from far away.

It was just actual shit left behind by visitors. That’s us. We’re alien shit.

I don’t understand what this comment is meant to convey. Could you explain a bit further?

Or. Orhearmeout—oorrr.

Fat belly with moobs.

🫪