Android emulator abused to introduce malware onto PCs

Re:Android emulator abused to introduce malware onto PCs by gchamonlive on Friday February 05, 2021 @08:41PM (#26043361)

A quick search showed compromised packages in arch aur repos: https://www.bleepingcomputer.com/news/security/malware-found...

You only change the focal point, but a centralised package manager is good for reasons other than security. Sure, a central tool will keep your whole system updated and improve security overall, but it won't prevent supply-chain attacks from happening.

Reading mailing lists and being careful with what you install will take you a long way in preventing malware.

[ Parent | on HN ]

Re:Android emulator abused to introduce malware onto PCs by sergeykish on Saturday February 06, 2021 @04:08AM (#26045306)

I trust packages that comes from official repositories.

> Warning: AUR packages are user produced content. These PKGBUILDs are completely unofficial and have not been thoroughly vetted. Any use of the provided files is at your own risk.

In other words AUR is not much safer than `curl to | sh`.

[ Parent | on HN ]

Re:Android emulator abused to introduce malware onto PCs by NullPrefix on Saturday February 06, 2021 @08:22AM (#26046323)

I assume AUR includes hashes, which could at least hint to deterministic builds. `curl to | sh` can change from build to build and there's no way to find out from which source other users built.

[ Parent | on HN ]

Re:Android emulator abused to introduce malware onto PCs by gchamonlive on Saturday February 06, 2021 @05:00AM (#26045508)

Sure, but it is centralised in the os distribution package manager, if you use helpers like yay. I am just pointing out that centralisation is not solution to the attack mentioned.

[ Parent | on HN ]