3 ms·
> Back then perhaps there was not enough context to know that Debian could be trusted. You are implying that it is clear-cut that Debian is trustworthy here. I
by zokier 3y ago
> Back then perhaps there was not enough context to know that Debian could be trusted.
You are implying that it is clear-cut that Debian is trustworthy here. In practice Debian did, and continues to do, heavy patching of packages to their needs, sometimes contrary to upstreams wishes. Iirc one of the issues here was the bug reports that Mozilla received that were in reality Debian-specific
- asveikau 3y ago2006 was around the time where they zero-initialized an entropy buffer in openssl to silence valgrind or similar tools. So the idea that debian would seriously botch a package was not so far fetched. That said, I used Debian, and didn't mind seeing iceweasel. It was kind of amusing, in fact.
- iforgotpassword 3y agoThat was pretty rad. Debian could generate up to 65536 different keypairs!!1