Debian's Apt Affected by MitM Attack for Arbitrary Code Execution as Root

11 pointsposted 21 hours ago
by justicz

4 Comments

pixl97

19 hours ago

"Don't worry, package signing is enough, you don't need https"

SahAssar

10 hours ago

"Don't worry, emudhra is not bad, we have package signing" - Ubuntu

What's the fallback after both signing and https are broken?

pixl97

8 hours ago

Living in a cave.