I don't sit on corner sofas regularly enough to have a standard seating position. In that picture I think I feel inclined towards the junction of the sofa.
Because they benefit from eating animals (they enjoy eating them) whereas they don't benefit from having sex with animals (they don't enjoy having sex with animals).
The forking option wouldn't work as well as it does on github because AUR packages are not namespaced like GitHub repos, e.g. communism/mypackage; instead it's just mypackage. So if adoption required a new name you'd have mypackage-cont, mypackage-cont-cont, or whatever. And it wouldn't really be possible to introduce username namespacing because AUR packages are just Pacman packages that are community-contributed rather than official, and Pacman, like most package managers, doesn't namespace their package names; firefox is just firefox rather than, say, mozilla/firefox. Some AUR packages get added to the official repos so when you do, e.g. yay -Syu, you'll then install the official package if you previously had the AUR package installed as it has the same name.
There isn't a perfect solution. Even if package adoptions were moderated, someone could take over a package and initially push a genuine commit, and then their next commit is malicious. Reviewing every single AUR commit would be incredibly labour-intensive. Possibly you could add automated checks for commits that suddenly add an npm install or other suspicious command with regex, but attackers could just get cleverer about avoiding those regex checks. Imo the best solution is just more widespread warnings about the fact that AUR packages are community-contributed with no guarantees of safety (e.g. on the Arch wiki where it sometimes suggests users install AUR packages), and AUR helpers forcing users to read PKGBUILDs before installation.
Just look for "faraday bag" online. There's some online stores that sell them.
If you mean an actual cage rather than a bag, not sure, but I imagine you could make one to your specified dimensions.
I agree about the risks in terms of the way some sources present the AUR as just extra packages. But I don't think you can object to the AUR more than any other place on the internet where anyone can upload software; unfortunately, the onus is going to be on the user to verify what they install. The AUR is moderated by volunteers and it wouldn't be fair to expect them to vet all of the high volume of commits to the AUR. Possibly they could vet new maintainers or new packages or newly adopted packages, but nothing would stop someone from initially uploading a genuine package and then replacing it with something malicious. Or they could require identity verification to be an AUR maintainer but then far fewer genuine packages would be on there because people don't want to give their real identity to contribute (I maintain some AUR packages, and would stop if required to verify my IRL identity).
I can totally understand if the AUR is not for you; it's more time-consuming as you have to read PKGBUILDs (I always do). But that doesn't make it bad that it exists at all. I think there should be more warnings about it for new users, and possibly some more moderation, though like I said above there's no perfect moderation solution that would simultaneously forgo users' responsibility to check and keep the AUR as large as it is today. Ultimately the option should still exist for users who want it. If it didn't exist, I'd have to hand-package every program that's not in the official repos, and that's even more time-consuming than pulling and reading through a PKGBUILD that someone else already wrote and shared.
It's just a repository of user-contributed packages. It's no different malware-ability-wise to, say, GitHub. If you are running code you found from a stranger on the internet then you are liable for it, and you need to do your due diligence in checking that you are not running malware. It is a good thing that the AUR exists because it means Arch user packages are all in one centralised repository instead of scattered across GitHub, Sourceforge, Codeberg, Pastebin, forums, whatever. If you are just installing random AUR packages then that's on you. It's basic internet safety to not automatically trust random scripts you find on the internet.
What an annoyingly uninformative title. Better title: a lot more compromised AUR packages have been found since our last update.
"A lot worse" is intentionally vague to get people to click.
It's a Haveno network. Haveno is the platform; RetoSwap provides a network for the Haveno platform.
I use bisq and retoswap.
I mean the ELI5 for the uninitiated is that X11 is older, and Wayland was made as the successor to X11. It aims to address issues that a lot of people had with X11. X11 is not in active development whereas Wayland is, and for support for modern tech, it'll be added to Wayland but not X11. These days I'd advise to go with Wayland unless you either have hardware that doesn't place nicely with it or you have a specific use-case for X11, i.e. Wayland unless you have a reason not to. Although most "beginner" distros choose for you without prompting you to pick, in which case go with the default (it's probably Wayland anyway).
If you mean to explain the debate, basically some people have particular things they want to do, or they want to do something a certain way, and it's not supported by Wayland, usually by design due to things like security concerns or philosophical differences with X11. X11 will continue to work for a long time but it's not getting new features, so if these issues are a concern with you, you could stick to X11 for the foreseeable future.
The average user is not supposed to notice a difference (apart from maybe QoL differences like performance, screen tearing, etc)—that's the goal of both projects. It should just display your desktop.
Enjoying the term daemond.
You're gonna have to elaborate on that… How so?