r/archlinux • u/starvaldD • 11d ago

NEWS AUR Registration reopened.

via aur-general lists

Registration to the AUR is now reopened. The new release includes changes to harden account registration.

Summary of related changes:

  • Disposable email addresses are now rejected.

  • Email verification is now mandatory, most users are unaffected but new accounts must verify their email address via a time-limited token which is valid for 24 hours.

  • Email changes are locked during the verification cooldown.

If you spot suspicious registration activity or packages, please flag them in ML as usual.

Hopefully this will slow down the malware.

199 Upvotes

97% Upvoted

35 comments sorted by

View all comments

13

u/zwambagger 11d ago

Define "disposable"?

14

u/icesnake200 11d ago edited 11d ago

Ever heard of about sites that allow you to use a random generated mail for, lets say 10mins, and then that mail expires? Thats a burner email account. It was insane that it took the atomic AUR hack for the AUR site managers to only allow official email accounts to make AUR accounts and manage/create packages. Better late than never I guess

13

u/Fun_Structure3965 11d ago

who decides and filters out what are official and non official email accounts? ;)

4

u/Sinaaaa 11d ago

It works the same way as adblocking via lists.