3 ms·
Why do you think "can not happen" even matters? No one does think it can not happen, because that is a silly thing to even say. "can not happen" does not exist
by Brian_K_White 3y ago
Why do you think "can not happen" even matters?
No one does think it can not happen, because that is a silly thing to even say. "can not happen" does not exist anywhere, there is only likelihood of happening, based on both history and motivation.
How often HAS it happened in any reputable distros official repos? They have all got decades of history by now so a good sea of data to generate solid statistics on frequency and distribution.
- throwaway71271 3y agoit is true, debian particularly has very good track record: https://security.stackexchange.com/questions/243455/was-there-ever-any-malware-found-in-debian-ubuntu-packages https://security.stackexchange.com/questions/243455/was-ther... however, cpan, npm, ports, homebrew, gems etc there are examples: https://docs.brew.sh/Acceptable-Casks#apps-that-bundle-malware https://docs.brew.sh/Acceptable-Casks#apps-that-bundle-malwa... but i was hinting more at the: there are so many packages, and so many that are used rarely, that there is no way we know. i think just running weekly modified files report and running things in sandboxes also dont give internet to all apps is good enough for me, and of course be critical of the sources you install from, reputable repos are better than non reputable ones, but are not immune.