3 ms·
infiltrating a repo is probably not the hard part, the hard part is getting a linux app that people would want to install. AFAIK, 0 QC or checking is done on t
by munin 14y ago
infiltrating a repo is probably not the hard part, the hard part is getting a linux app that people would want to install.
AFAIK, 0 QC or checking is done on the contents of a repo. additionally, there have been enough times in the past where someone has just straight up rooted the servers that the repo lives on ...
- BCM43 14y agoAFAIK, 0 QC or checking is done on the contents of a repo. additionally, there have been enough times in the past where someone has just straight up rooted the servers that the repo lives on Are you talking about debian/fedora repos? Because if so, that is simply false. Both have heavy QC, and the packages are all signed by the developers keys, and the OS checks those keys.