The officially official Devuan Forum!

xinomilo

Unknown

Registered: 2017-07-02

Posts: 315  

Re: malware on devuan repos or false positives?

Ideally if you had a rsync of a mirror locally you could update systems through a lan connection much more securely without having to go through internet hoops.

to clear something : this is not a local mirror, it's a mirror in Devuan RR, rsynced directly from pkgmaster - which changed ip once again recently without any official notification...
mirror is used daily by many people.

xinomilo

Unknown

Registered: 2017-07-02

Posts: 315  

Re: malware on devuan repos or false positives?

in general,
if everyone thinks these should questions be silently ignored (even if false positives), then ... i give up, maybe i shouldn't use the forums either.. community toxicity seems to be an issue not solvable... (not sure, what i expected in the 1st place, from a nazi friendly environment.)

i read all sorts of BS, like trying to blame me or Clamav or LMD for not being responsible or spending devuan devs precious time, while they are doing their fine job and not need to hear this..
well, that's how communities work. communicate issues, no matter how stupid they might seem to you (...elitists)..
so someone(...) who checked this, is going to communicate this false positive to another foss (clamav) to help make it better, and not just whine about it in whatever forums.

---
anyway, some moderator, please lock this thread...
not solved imho, got no help/assurances from pkgmaster admin, so lock it up anyway.
tired of all the spam and bs on this thread.

brocashelm

Member

Registered: 2020-06-29

Posts: 114  

Re: malware on devuan repos or false positives?

not sure, what i expected in the 1st place, from a nazi friendly environment

Wait... What?

If I can gauge the political talks on here over the years, I would say there's a lot more clamoring support for Antifa/BLM, mask and vaccine mandates, and anti-capitalism/pro-socialism. In fact, it's very common to refer to a user as "they/them", which means the individual probably believes in the "gender" fallacy. If these folks are "Nazis" to you, then I'm your worst nightmare.

Anyway, you are not helping your situation by getting defensive here. Others have tried to explain to you that everything you've described is fairly normal and not any evidence for concern. You're also not doing it right by using ClamAV, which is for finding Windows viruses (not so much GNU/Linux or even another Unix/Unix-like OS). In all reality, if you are that paranoid about security, you should probably start looking into using OpenBSD, as it is a much smaller attack target compared to GNU/Linux or macOS (and these two are less of a risk compared to Windows).

aluma

Member

Registered: 2022-10-26

Posts: 646  

Re: malware on devuan repos or false positives?

yes, you're missing something, "1st message on devuan mirror files" is more accurate.

Understood thanks.

PS. You are needlessly offended.
From my own experience, I accept the skepticism of my colleagues. I stopped checking my home desktop with all sorts of сheckroot, etc. because over the years I have never seen any suspicious programs. As I understand it, home users have little interest in hackers, and if something gets into the distribution, there are more qualified people who will make a fuss.
 
Devuan is more of a distribution for enthusiasts than for cooperative or business use, security requirements and the risk of hacking are probably lower.
But that's just my opinion.

Regards.