News for hackers. Stuff that matters.
Re:SKS Keyserver Network Under Attack by sirn on Saturday June 29, 2019 @11:56AM (#20313270)
Ubuntu runs its own SKS keyserver (keyserver.ubuntu.com) and apk-add-repository use it when adding a PPA repository. I think in theory it's still possible to break package manager in Ubuntu if someone decide to poison a popular PPA repository/key.
Re:SKS Keyserver Network Under Attack by rlpb on Saturday June 29, 2019 @06:21PM (#20315160)
PPA repository keys are generated by Launchpad; mere Launchpad users cannot inject arbitrary PPA repository keys.