Results 1 to 7 of 7

Thread: IDEA: Put Ubuntu ISOs in Ubuntu repos

  1. #1
    Join Date
    Aug 2015
    Beans
    463

    IDEA: Put Ubuntu ISOs in Ubuntu repos

    In 2016, Linux Mint's website was hacked and links to their ISOs were changed to compromised ISOs, and what's worst, the hackers changed the checksums on the site to match their compromised ISOs, so even if you diligently checked the checksums, you are still tricked into downloading compromised Linux ISOs.

    So, my idea is, for existing users, why not put the Ubuntu ISOs, ISOs of the various Ubuntu flavors, in the Ubuntu repos for secure downloading instead? I believe downloading from the repos is more secure than downloading from a website.

  2. #2
    Join Date
    Nov 2009
    Beans
    Hidden!
    Distro
    Kubuntu 18.04 Bionic Beaver

    Re: IDEA: Put Ubuntu ISOs in Ubuntu repos

    repo is a website (well it can be accessed through web browser)
    Read the easy to understand, lots of pics Ubuntu manual.
    Do i need antivirus/firewall in linux?
    Full disk backup (newer kernel -> suitable for newer PC): Clonezilla
    User friendly full disk backup: Rescuezilla

  3. #3
    Join Date
    Aug 2015
    Beans
    463

    Re: IDEA: Put Ubuntu ISOs in Ubuntu repos

    Quote Originally Posted by mastablasta View Post
    repo is a website (well it can be accessed through web browser)
    But isn't the Ubuntu repositories more secure though than a website though?

  4. #4
    Join Date
    Nov 2009
    Beans
    Hidden!
    Distro
    Kubuntu 18.04 Bionic Beaver

    Re: IDEA: Put Ubuntu ISOs in Ubuntu repos

    it has mirrors and probably some additional protection than the average website or blog. but nothing is 100%.

    i had a breach via an addon that was installed but disabled. so all the strong passwords didn't help.

    you have:
    active releases: https://releases.ubuntu.com/
    old releases: http://old-releases.ubuntu.com/releases/
    and cd image server: http://cdimage.ubuntu.com/

    basic apache server helps keeping things simple and secure.
    Read the easy to understand, lots of pics Ubuntu manual.
    Do i need antivirus/firewall in linux?
    Full disk backup (newer kernel -> suitable for newer PC): Clonezilla
    User friendly full disk backup: Rescuezilla

  5. #5
    Join Date
    Jun 2010
    Location
    London, England
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: IDEA: Put Ubuntu ISOs in Ubuntu repos

    All Ubuntu ISO images including those for the 10 flavours of Ubuntu are hosted on cdimage.ubuntu.com. I cannot imagine the repository for the ISO images being less secure than the repositories for the software packages in the Ubuntu distribution.

    Regards
    It is a machine. It is more stupid than we are. It will not stop us from doing stupid things.
    Ubuntu user #33,200. Linux user #530,530


  6. #6
    Join Date
    Jun 2016
    Beans
    2,049
    Distro
    Xubuntu 20.04 Focal Fossa

    Re: IDEA: Put Ubuntu ISOs in Ubuntu repos

    For what it's worth, the shaXXXsums.gpg files are detached signature of the corresponding shaXXXsums file, this signature can be verified using Ubuntu APT's default keyring, which is also used to verify stuff from the Ubuntu repos.

  7. #7
    Join Date
    Aug 2020
    Beans
    5

    Re: IDEA: Put Ubuntu ISOs in Ubuntu repos

    This is a good idea, I like your suggestion.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •