3 ms·
Not to mention it introduces a single point of failure, that once compromised can start pushing malware directly to user. With maintainers in the loop, there i
by m4rtink 4y ago
Not to mention it introduces a single point of failure, that once compromised can start pushing malware directly to user.
With maintainers in the loop, there is at least one more person that can notice something is fishy. Not to mention there is usually so time before packages are updated, so there is more time to notice an attack.
- AnIdiotOnTheNet 4y ago> With maintainers in the loop, there is at least one more person that can notice something is fishy Also one more person who can inject malware or break something. How did that Debian keygen issue happen again? Oh right.
- bombolo 4y ago> How did that Debian keygen issue happen again? The people on the openssl mailing list said it was fine. That's how it happened.
- AnIdiotOnTheNet 4y agoAnd yet the upstream developers themselves never incorporated the change, it was entirely because an unnecessary third party middle man made unnecessary changes.