News for hackers. Stuff that matters.

A comment on Remote code execution vulnerability in apt/apt-get. Parent comment

Re:Remote code execution vulnerability in apt/apt-get by guest2143 on Tuesday January 22, 2019 @11:58AM (#18969749)
Some country's firewalls distrupt https, which makes downloading things via https difficult.
[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by tinus_hn on Tuesday January 22, 2019 @03:10PM (#18971941)
So you create an non default http mirror for that minority, instead of making the majority insecure.
[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by DoctorOetker on Tuesday January 22, 2019 @02:19PM (#18971414)
so if north korea is subjugating some poor souls over there, the whole world must suffer along? there could be a setting with a big warning to disable the default HTTPS behaviour...
[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by jamp897 on Tuesday January 22, 2019 @12:19PM (#18970032)
Which countries? I’ve only seen HTTP connections tampered with in practice, and China’s GFW blocks HTTP no different than HTTPS from what I’ve seen.
[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by eeZah7Ux on Tuesday January 22, 2019 @02:50PM (#18971746)
Also some companies, to allow IDS to inspect traffic without having to extract keys from clients.
[ Parent | on HN ]