I'm making a distro, which is another hyprland flavor with my custom DE, that will actually be secure, unlike 99% of similar distros.
The weakest point is the repos. I've been planning to harden arch as much as possible, but you can't survive another xz backdoor, which has happened because the security team's budget was spent on DEI. I'm not even talking about aur, the core repos will absolutely be raped someday, it's only a matter of time (they just will be raped, okay?).
Another bottleneck is the rolling-releases. Nobody (including me) will use hyprland 0.1 with chatgpt cli beta or whatever. If not the latest - then at least younger than a month old.
>Artix and other repos run in some chuddie's basement.Way worse and shouldn't be considered or trusted.
>Own repos.I'm not planning to hire a security team yet or to review every update by myself.
Post too long. Click here to view the full text.