[lauriswtf]

Why is this on the frontpage?

[bitJericho]

Because it's kind of completely ridiculous; both the problem and the proposed solution.

[tommorris]

...and the fact that it kind of suggests that you might not want to trust a Linux distro to get security right on your boxes if they are unable to fix their SSL certs after 3 days.

[creshal]

Manjaro had a rather… iffy relationship with developing a security mindset in the past: http://allanmcrae.com/2013/10/comparison-of-security-issue-h...

It appears they're not learning.

[jonathonf]

The two are not really related.

With regards package updates, when Arch started publishing security update announcements Manjaro could start pushing those out faster. Delayed updates of other upstream packages is not really an issue (e.g. Ubuntu and CentOS have many packages that are not in sync with upstream).

[mahouse]

Because people are forgetting that the first rule of Hacker News is that no fun is allowed.