Functional & fake repository still would depend on user not paying attention. That is one of the major differences between Windows and Linux. The only exploits which got through Linux's basic...
Type: Posts; User: cwsnyder; Keyword(s):
Functional & fake repository still would depend on user not paying attention. That is one of the major differences between Windows and Linux. The only exploits which got through Linux's basic...
Actually that isn't quite correct. Some mirrors are ftp sites for both downloads and updates.
@Hungry Man: I'm not sure how you would set up for an https:// connection to a local repository on a LAN. SSH, yes, but for https:// you would almost have to have a web server.
Said malicious hacker would have to not just control the DNS, the repository would also have to fake the 'signatures' of the repositories and packages, which I believe have an AES two-part encryption.