News for hackers. Stuff that matters.

A comment on Linux Mint downloads (briefly) compromised. Parent comment

Re:Linux Mint downloads (briefly) compromised by annnnd on Monday February 22, 2016 @07:27AM (#11150337)
True, but the site has to be compromised at the moment you are downloading the keys (not anytime later!), and then all your further installations have to me MITM-ed or you would take notice. Not so trivial for attacker anymore.

Ideally, the keys should be distributed in safe fashion too, so this whole question should be moot.

[ Parent | on HN ]
Re:Linux Mint downloads (briefly) compromised by c22 on Monday February 22, 2016 @01:13PM (#11152916)
> ...and then all your further installations have to me MITM-ed or you would take notice. Not so trivial for attacker anymore.

Though perhaps more trivial when the attacker has helpfully provided your operating environment.

[ Parent | on HN ]