News for hackers. Stuff that matters.

A comment on Remote code execution vulnerability in apt/apt-get. Parent comment

Re:Remote code execution vulnerability in apt/apt-get by whydoyoucare on Tuesday January 22, 2019 @03:33PM (#18972154)
CA-model requires "extra" investment, that not many are willing to make. Plus there is a secure way to distribute an OS, which does not require https [download over http, obtain signed check-sums from a trusted source, verify, and proceed with installation].
[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by cryptonector on Tuesday January 22, 2019 @05:59PM (#18973525)
Letsencrypt.org.

Stop it, just stop it.

[ Parent | on HN ]