3 ms·
Of course, if the source is compromised, then all bets are off. It's all about degrees / probabilities when talking about security.
by noobermin 10y ago
Of course, if the source is compromised, then all bets are off. It's all about degrees / probabilities when talking about security.
- fulafel 10y agoYep, but it's not just the official source, it's also the guy's computer who uploads the source to the PPA. Just something to keep in mind when adding a PPA: you're tying your machine's integrity to the integrity of the PPA and its keyholder(s), and this trust is tested each time you update your packages.