4 ms·
If they can replace the front page html, they could probably also replace the source code distribution with a backdoored/trojaned tarball. Or someone else might
by 0x0 13y ago
If they can replace the front page html, they could probably also replace the source code distribution with a backdoored/trojaned tarball. Or someone else might already have done so, since who knows how long ago, using the same exploit.
- userbinator 13y agoBut would they also be able to replace the public key of the authors in all the other places it appears on the Internet?
- dionyziz 13y agoThat. That's why the authors PGP-sign their sources. Furthermore, some of us maintain GPG trust paths, so replacing it on every other place on the Internet would still be futile.
- dmix 13y agoThere is also benefits of using decentralized distribution channels like bittorrent. So a single source can't be compromised.