FYI, if you are on Debian and have daily updates on(unattended-upgrades is your friend) you most likely already have the patch it came out yesterday.
Who does that and privates himself from the pleasure of dping tit manually?
and privates himself from the pleasure of dping tit manually
Um…
What?
The vulnerability exists in the HTTP backend invoked by the APT library, and affects any APT-based frontend (apt, apt-get, aptitude, or any of the Ubuntu graphical applications).
The use of TLS via HTTPS protects against this vulnerability, as exploitation requires the attacker to manipulate HTTP traffic.
What a fucking surprise. They’ve been trying to justify using HTTP for apt repositories with the excuse “but every package is signed by GPG.” Well guess what, fuckers! WE FUCKING TOLD YOU SO!
Such a vulnerability could exist in any protocol… Like TCP in the Linux kernel
And in the next year we’re going to see you proven right so many times we’ll beg it to stop - but it won’t instead it’ll get worse. The CVE graph is becoming exponential. Rumor on the street (and by street I mean blind app) is that the larger unreleased models SOTA labs have are a significant improvement, so much so they’ll likely never be released to the general public.
Anyways, this K shaped shitheap is going to hurt I hope you’re wearing your seatbelt…
Some more… hypertense individuals might see all these recent news and think Linux as super flawed. I’d think otherwise, Linux is becoming popular and so it gets a lot of new QA (though how it’s reported from what I see feels mishandled).
My take away is some distros had patches much quicker than others. Debian smelling good these days.
Is Hannah Montana Linux safe?
It’s Debian based so it’s unlikely.
