Jump to content

Talk:RPCS3

From ArchWiki
Latest comment: 9 August by Roboguy420 in topic Should rpcs3-bin be recommended?

Should rpcs3-bin be recommended?

I noticed in the installation section that alongside rpcs3-git, this wiki page recommends rpcs3-bin as another option.

Having inspected the AUR package, I've found that rpcs3-bin is simply "get the latest binary from the upstream releases and skip the sha256sum check".

This is quite a large security risk and IMO should not be recommended alongside rpcs3-git. See just 2 months ago, Cemu's latest release had been replaced by a malicious actor with malware.

Given rpcs3-bin skips the sha256sum check, and given RPCS3's releases on Github are not immutable, the AUR package serves as an avenue for this kind of security compromise.

I think that rpcs3-bin should at the very least be moved to a lower-down "alternative ways to install" section, if not removed from the Wiki page entirely, and rpcs3-git should be the only recommended choice. Roboguy420 (talk) 10:22, 9 August 2026 (UTC)Reply