Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting
moldy_rice@piefed.keyboardvagabond.com 4 days ago MITM attacks happen all the time. As are there a ton of historical cases of CA compromise.
I can’t think of a time that a Debian maintainer went rogue and put something malicious into the official repos.
And, if they did, everyone would see it. But MITM attacks are not publicly visible because they’re targeted.
hperrin@lemmy.ca 4 days ago
I can literally think of the XZ utils off the top of my head. That was nearly the most prolific supply side attack of all time, and it absolutely was in the Debian repos, signed by the Debian package maintainers. In a docker container, that attack wouldn’t have worked. It’s only when installed on bare metal.