PDA

View Full Version : Are PPAs secure from social engineering?


mamamia88
July 27th, 2010, 06:43 PM
I've been wondering can anyone create a ppa and trick someone into installing software from it or are they strictly monitored? I know that the default repositories are secure but what about installing software from ppas?
Tristam Green
July 27th, 2010, 06:47 PM
in a word?? no.
aysiu
July 27th, 2010, 08:00 PM
They are not secure from social engineering. If you don't know the person posting the PPA, be wary.

That said, I have not heard of many cases of PPAs containing malware. Doesn't mean that can't, just that they generally don't.
conundrumx
July 27th, 2010, 08:06 PM
The only system completely safe from social engineering is one without humans.
mamamia88
July 27th, 2010, 08:07 PM
The only system completely safe from social engineering is one without humans.

definitely true but how closely watched are ppas? is launchpad owned by canaiocal?
FuturePilot
July 27th, 2010, 08:16 PM
definitely true but how closely watched are ppas? is launchpad owned by canaiocal?

Launchpad is run and owned by Canonical. But I don't know if they have any kind of review process for PPAs. Probably not considering the sheer number of them and the amount of packages that get uploaded daily.