News for hackers. Stuff that matters.

A comment on Evilgrade is like Firesheep for Software Updates. Parent comment

Re:Evilgrade is like Firesheep for Software Updates by watty on Thursday November 04, 2010 @04:17PM (#1870592)
Public-key cryptography. The update server could send a signature along with the update package and the software would check the update contents to make sure the signature matches.
[ Parent | on HN ]
Re:Evilgrade is like Firesheep for Software Updates by mjgoins on Thursday November 04, 2010 @04:41PM (#1870685)
Yes, debian and ubuntu do this using OpenPGP. I'm sure other distros use something similar. Yet another reason to stick with free software.
[ Parent | on HN ]
Re:Evilgrade is like Firesheep for Software Updates by dguido on Thursday November 04, 2010 @05:10PM (#1870794)
You saw APT in the supported list right? :-P
[ Parent | on HN ]
Re:Evilgrade is like Firesheep for Software Updates by mjgoins on Thursday November 04, 2010 @07:27PM (#1871303)
That only means that it will work if the user ignores stern warnings telling them the software is untrusted.
[ Parent | on HN ]