News for hackers. Stuff that matters.

A comment on Linux Mint downloads (briefly) compromised. Parent comment

Re:Linux Mint downloads (briefly) compromised by ajdlinux on Monday February 22, 2016 @07:01AM (#11150231)
APT can automatically verify GPG signatures against a preinstalled keyring. Obviously, that doesn't help in the case of this particular incident (ISOs), but it does help in day-to-day updates.
[ Parent | on HN ]
Re:Linux Mint downloads (briefly) compromised by jnbiche on Monday February 22, 2016 @08:18AM (#11150561)
Not sure why this was downvoted, since it's true. apt does this by default, in fact.

GPG is immensely useful for securely distributing packages and distros.

[ Parent | on HN ]