New answers tagged

1

Debian and Ubuntu packages are signed with GPG keys, making it pretty hard to replace a software package in the repository with another one. For the installation medium itself (the ISO) there are some hashes and GPG signatures available, but these are not automatically checked. This makes it possible to swap the installation ISO with another one, as ...


3

It isn't. The threat model attempts to be resistant to external attack, but if all it takes is a malicious line in a build script on a package used on most systems (e.g. libc, x11, etc.) then all they need to do is compromise one build machine to gain near-universal control. Attempting to protect against this is hard, and the only way to do it is to build ...



Top 50 recent answers are included