@moldy_rice@piefed.keyboardvagabond.com
2026-10-26 03:13 UTC
MITM attacks happen all the time. As are there a ton of historical cases of CA compromise.
I can’t think of a time that a Debian maintainer went rogue and put something malicious into the official repos.
And, if they did, everyone would see it. But MITM attacks are not publicly visible because they’re targeted.
Replies (1)
-
@hperrin@lemmy.ca 2026-10-26 04:52
I can literally think of the XZ utils off the top of my head. That was nearly the most prolific supply side attack of all time, and it absolutely was in the Debian repos, signed by the Debian package maintainers. In a docker container, that attack wouldn’t have worked. It’s only when installed on bare metal.