moldy_rice

Does unattended upgrades fix this on Debian? Or do I have to reboot now for it to take effect?

MITM attacks happen all the time. As are there a ton of historical cases of CA compromise.

I can’t think of a time that a Debian maintainer went rogue and put something malicious into the official repos.

And, if they did, everyone would see it. But MITM attacks are not publicly visible because they’re targeted.

Citation needed.

Good call to install Linux.

You’re talking about publishing infrastructure compromise

Compromise of the integrity of the traffic between your server and theirs can happen. Loads of CAs have been compromised. X.509 root stores insecurity breaks https.

Apt and most package managers have cryptographic verifications on all packaged by default since the 1990s.

Docker pull does not, so it will happily download a maliciously modified image, without checking.

You can go in the sun, but wear sunscreen. You can have sex with a stranger, but wear a condom. You can download software, but check the cryptographic signature.

Apt and most package managers have cryptographic verifications on all packaged by default since the 1990s.

Docker pull does not, so it will happily download a maliciously modified image, without checking.

How does it work? Just installs apt packages?

This comment is suggesting doing many things extremely vulnerable to supply chain attacks. Please don’t upvote or do this.

Link?

Sub fail2ban for wazuh. It does the same but so much more, and does everything with 0 config after fresh install.

Wazuh and TOTP

The situation is so concerning, he notes, because there isn’t much that people can do to protect themselves from zero-click ad attacks other than blocking ads as thoroughly as possible on all websites and platforms—a fact that intelligence agencies like the NSA and CIA seem to know all too well.

Or disable JavaScript

I’ve spent hours trying to satisfy Jellyfin and it never fully works correctly.

So, I don’t.

Charging corporations is not a violation of OSI’s definition.

Their definition is free as in speech, not as in beer.

Maybe artists are just less greedy than the average tech bro?

Because your phone gives it that info

Charging corporation. Making it free for personal use and nonprofits

This seems awfully familiar to the gun crackdowns after the Black Panthers started using them for self defense.

It has access to your phones fingerprint, which is then linked to all your other activity.

It doesn’t need access to the phone data. All it needs is the fingerprint.

The phone number part significantly degrades your privacy and security

No phone number needed. Can run directly on a non-phone server.

Also more secure and trustworthy because it’s open source.

If you manage to make an account on WhatsApp and move it to waydroid, they’ll ban you.

Meta’s game is (meta)data collection and selling your data. They’ll delete your account if they can’t get all your phone’s data (eg if it’s an emulator then they can’t uniquely identify you)

Doesn’t the bridge require you to run whatsapp on a phone anyway?

God that sucks.

Why not use SimpleX or Wire or Matrix?

I go the easy route with munin and wazuh. It comes with a ton of stuff preconfigured

Yes but you should buy 3 and cluster them

Similar, but you might want to update more frequently with the huge number of critical security bugs being discovered by AI recently

Ansible.

My point is that they support unsigned packages.

It’s not possible to download a package on apt without signatures, by default. All packages are signed.

We tell people to use Signal, not Telegram, because the later allows unencrypted messaged by default.

I don’t know of any common oci repos that have many signed packages. If you make it your policy to require signatures, there’s almost no images you’ll be able to download because almost none are signed.

Whereas it’s 100% of packages in Debian’s apt that are signed.