Debian's Apt Affected by MitM Attack for Arbitrary Code Execution as Root
11 points by justicz a day ago | 4 comments
  • SG- a day ago |
  • pixl97 a day ago |
    "Don't worry, package signing is enough, you don't need https"
    • SahAssar 12 hours ago |
      "Don't worry, emudhra is not bad, we have package signing" - Ubuntu

      What's the fallback after both signing and https are broken?

      • pixl97 11 hours ago |
        Living in a cave.