Comment on Kernel.org has been hacked (see site news)Comments−copper15yAnyone know how this affects the ArchLinux packages? kernel.org is still the fastest mirror around for them.−naner15yProbably not at all (the Arch userbase isn't much of a target). That being said, pacman doesn't implement package-signing last time I checked so it certainly would be easier to pass off bogus packages than with other distros.−crocowhile15yPacman now supports package signature verification (it'svery recent news.)
Comments
Anyone know how this affects the ArchLinux packages? kernel.org is still the fastest mirror around for them.
Probably not at all (the Arch userbase isn't much of a target). That being said, pacman doesn't implement package-signing last time I checked so it certainly would be easier to pass off bogus packages than with other distros.
Pacman now supports package signature verification (it'svery recent news.)