DDiggler

17 ms·

1. 1.▲
   by DDiggler 2y ago

   Meanwhile in Arch land (possibly other distros as well), the fwupd package (which I imagine to be a fairly common package to be installed among the user base) has been silently configured to depend on passim, which spins up an open web serv
2. 2.▲
   by DDiggler 2y ago

   >friendly adjacent neighbors As a Finn I laughed out loud.
3. 3.▲
   by DDiggler 2y ago

   The "verification" downloads the file twice... seems like one could easily make a custom HTTP server to change the second consecutive response to a malicious one.