Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Since the distro's site was compromised you also have to check that any keys it distributes haven't changed. And that the compromise wasn't done by a legitimate maintainer.


The packages in question don't come from the distro's homepage.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: