Internet is now proved to be unsecured even if DNS are patched and i reached and unthinkable level of paranoia. Given that launchpad ppa (which are awesome for QA) doesn’t use signed packages, so i can’t actually check the integrity of them i’ve changed all my sources.list from url’s to ip’s so i can’t (at least i hope) be vulnerable to cache poisoning \o/

P.S: Please launchpad team, make ppa use signed packages!

by nxvl at 11:27 PM under apt , deb , dns , launchpad , packages , planet ubuntu , ppa , security , sources , ubuntu (Comments)