News for hackers. Stuff that matters.

A comment on Beware of hacked ISOs if you downloaded Linux Mint on February 20th.

Re:Beware of hacked ISOs if you downloaded Linux Mint on Feb... by anishathalye on Saturday February 20, 2016 @10:59PM (#11143238)
It's somewhat disappointing that this blog article is served over HTTP, and it's impossible to access it via HTTPS. How do we know that these new MD5s are to be trusted?
[ Parent | on HN ]
Re:Beware of hacked ISOs if you downloaded Linux Mint on Feb... by bogus- on Saturday February 20, 2016 @11:07PM (#11143253)
Linux Mint doesn't seem to prioritize security in general. No TLS for ISOs, no easily spottable signatures for ISOs, marking security updates untrusted by default...
[ Parent | on HN ]
Re:Beware of hacked ISOs if you downloaded Linux Mint on Feb... by RaleyField on Sunday February 21, 2016 @11:34AM (#11145112)
They also ignore (at least they used to) DNS servers from DHCP and use Google's public DNS servers completely oblivious of why users might not want this.
[ Parent | on HN ]