Groups | Search | Server Info | Login | Register


Groups > alt.os.linux.mint > #19963

Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads

From Mike Easter <MikeE@ster.invalid>
Newsgroups alt.os.linux.mint
Subject Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads
Date 2016-02-22 09:50 -0800
Message-ID <dj103hFu5u6U1@mid.individual.net> (permalink)
References <20160222034454.0fba6a46@jspc> <naepoh$jpa$1@dont-email.me> <dj0pmpFsf3mU1@mid.individual.net> <ercmcbdovl4bpdgd49l700gg99jcjqpfmt@7ax.com> <dj0t40Ftc51U1@mid.individual.net>

Show all headers | View raw


Mike Easter wrote:
> FredW wrote:

>> I download fromhttp://www.linuxmint.com/   (now no connection)
>
> Mint's site has made the use of mirrors and torrents readily available.
>
>> I downloaded from nluug (NL)
>> https://www.nluug.nl/
>> http://ftp.nluug.nl/pub/os/Linux/distr/linuxmint/iso/stable/
>
> That is a 'good' mirror.
>
>> Last time I downloaded 17.3 from University Aachen (D)
>> http://mirror.bauhuette.fh-aachen.de/linuxmint-cd//stable/17.3/
>
> That is also a good mirror.
>
>> I suppose I do not use a torrent (which torrent ?),
>> but as these download sites are all I know,
>> why would I look for something I never heard off ???
>
> Your experience supports my argument in a way.  You know mirrors (just
> not the word apparently); you just don't do torrents.

I went to the wayback machine to look at the mint dl page from Jan 9 to 
refresh my recollection of how the dl page gives links to the torrents 
and mirrors.

Highest on the dl page is torrent, before the primary mirrors.  Next 
comes the mirrors grouped by continent.  In order for you to find your 
Europe continent you would 'scan' down the list of African mirrors, 
Asian mirrors, to look through the alphabetic list of 50 European 
mirrors to find the .nl mirror or the 6 different .de mirrors.

After the primary mirrors comes the list of secondary mirrors.  The word 
'mirror' is mentioned 10 times on that page.  Torrent twice including 
the link to the torrent.

The md5 for the .iso is given up in the top section where the link to 
the torrent and the release notes and announcement are found.

Any time I download an .iso, I always check its md5 for the sole purpose 
of confirming a good download, not for thwarting a bogus .iso.

The fact of md5 insecurity collision exploits is not important in that 
context.


-- 
Mike Easter

Back to alt.os.linux.mint | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Johnny <johnny@invalid.net> - 2016-02-22 03:44 -0600
  Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads TimW <tim@mysurname.me.uk> - 2016-02-22 11:03 +0000
    Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-22 08:01 -0800
      Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads FredW <fredw@ninmule.invalid> - 2016-02-22 17:31 +0100
        Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-22 08:59 -0800
          Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-22 09:50 -0800
            Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-22 10:12 -0800
          Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads FredW <fredw@ninmule.invalid> - 2016-02-22 19:29 +0100
            Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-22 10:43 -0800
              Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads FredW <fredw@ninmule.invalid> - 2016-02-22 20:08 +0100
                Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-22 11:53 -0800
            Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads "Cybe R. Wizard" <cybe_r_wizard@WizardsTower.invalid> - 2016-02-23 05:42 -0600
              Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads ronb <ronb02NOSPAM@gmail.com> - 2016-02-23 19:34 +0000
                Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads stepore <linshine@here.now> - 2016-02-23 20:59 -0800
              Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads stepore <linshine@here.now> - 2016-02-23 21:02 -0800
                Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads "Cybe R. Wizard" <cybe_r_wizard@WizardsTower.invalid> - 2016-02-24 00:50 -0600
          Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Yrrah <Yrrah-aolm@aolm.invalid> - 2016-02-22 20:15 +0100
            Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Johnny <johnny@invalid.net> - 2016-02-22 13:55 -0600
        Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Andy <nospam@no.no> - 2016-02-22 21:57 +0000
      Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-22 08:49 -0800
      Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads stepore <linshine@here.now> - 2016-02-22 20:51 -0800
        Re: Hacker explains how he put "backdoor" in hundreds of Linux Mint downloads Mike Easter <MikeE@ster.invalid> - 2016-02-23 02:51 -0800

csiph-web