447
400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers
(cybersecuritynews.com)
this post was submitted on 12 Jun 2026
447 points (99.8% liked)
Technology
88098 readers
4580 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
flatpak has a sandbox
Be careful with relying on it though since it has more holes than swiss cheese due in part to lazy devs who request unesecary permissions & the sandbox being slightly flawed from a security perspective.
A sandbox that has enough protection to be secure also has enough restrictions as to be too annoying to use, and often is useless. Don't get me wrong, sandboxes can be very good, but only in specific situations. In general you need your applications to be secure without a sandbox.
What do you mean, don't you love a text editor that can not open any file on your system?
You're basically describing ed.
It's a sandbox in the sense that it is a box to keep the sand in one place under normal circumstances. It was never intended to completely prevent sand from being ejected by an unruly child inside of it. Or perfectly keep outside toys from being brought into it if someone tries to do that.