4 ms·

And this would still only buy me something if Canonical are backdooring their packages, which I don't think they are. It's a huge amount of extra effort for wha

by mjg59 11y ago

And this would still only buy me something if Canonical are backdooring their packages, which I don't think they are. It's a huge amount of extra effort for what is (as far as I'm concerned) zero benefit.

ryao 11y ago
That assumes that anyone interested in putting backdoors into Canonical's packages never gets a job making their packages. If you are really concerned having trustworthy systems, you need to build from source and if you doing that anyway, you might as well just use the binaries built from source.