Re: How to get 100% secure debian system?

Path	csiph.com!1.us.feeder.erje.net!3.us.feeder.erje.net!2.eu.feeder.erje.net!3.eu.feeder.erje.net!feeder.erje.net!weretis.net!feeder8.news.weretis.net!news.mixmin.net!aioe.org!news.servidellagleba.it!bofh.it!news.nic.it!robomod
From	Ángel <debian-security@debian.16bits.net>
Newsgroups	linux.debian.security
Subject	Re: How to get 100% secure debian system?
Date	Mon, 23 Jan 2023 00:20:01 +0100
Message-ID	<FQRMZ-rAM-3@gated-at.bofh.it> (permalink)
References	<FQRMZ-rAM-5@gated-at.bofh.it> <FQMtY-o9J-17@gated-at.bofh.it>
X-Original-To	debian-security@lists.debian.org
X-Mailbox-Line	From debian-security-request@lists.debian.org Sun Jan 22 23:10:04 2023
Old-Return-Path	<debian-security@debian.16bits.net>
X-Amavis-Spam-Status	No, score=-6.463 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, LDO_WHITELIST=-5, SARE_MSGID_LONG40=0.637] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate:hard: -4.6
X-Greylist	delayed 1333 seconds by postgrey-1.36 at bendel; Sun, 22 Jan 2023 23:09:46 UTC
Content-Type	text/plain; charset="UTF-8"
Content-Transfer-Encoding	quoted-printable
MIME-Version	1.0
X-Mailing-List	<debian-security@lists.debian.org> archive/latest/29348
List-ID	<debian-security.lists.debian.org>
List-URL	<https://lists.debian.org/debian-security/>
List-Archive	https://lists.debian.org/msgid-search/8e25b9373fd4d6927a429194e8a7749a9c10690c.camel@debian.16bits.net
Approved	robomod@news.nic.it
Lines	22
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Mon, 23 Jan 2023 00:09:41 +0100
X-Original-Message-ID	<8e25b9373fd4d6927a429194e8a7749a9c10690c.camel@debian.16bits.net>
X-Original-References	<CAFJGKPkXcYw=XGdOb1acPsVvC3O9TtHQ4a-P+58pUr7c0JYO_g@mail.gmail.com>
Xref	csiph.com linux.debian.security:6188

Show key headers only | View raw

On 2023-01-22 at 20:30 +0300, Roman wrote:
> Hello. I'm a Windows 10 user. Unfortunately, I've used a lot of
> cracked programs in the past. I want to switch to debian and use only
> legal software. I want to write debian netinst to a flash drive. Is
> it possible that the distribution on the flash drive will be hacked
> through a Trojan or the sources of downloaded files from the server
> will be changed during installation? I create websites. It is
> important for me to know that my system is 100% secure and
> information is not shared with third parties.

While highly unlikely, that's of course possible. That's the
bootstrapping problem. In order to ensure that you have a legitimate
install disk, you would need to create/receive it from a safe source
(e.g. if your computer is compromise, you might not even be downloading
it from the actual site!)
You could buy a new computer that came with Debian preinstalled
(assuming you trust the manufacturer and seller), or you could ask a
local user group to provide an installer for you (if you trust them to
give you a safe medium)... you will need to trust someone/something.

Once you have a trusted host, it can be used for ensuring further
updates can be trusted.

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar

Thread

How to get 100% secure debian system? Roman <romansouth7@gmail.com> - 2023-01-22 18:40 +0100
  Re: How to get 100% secure debian system? Jonathan Hutchins <hutchins@tarcanfel.org> - 2023-01-22 19:40 +0100
    Re: How to get 100% secure debian system? Alexander Swen <alex@swen.nu> - 2023-01-23 00:50 +0100
      Re: How to get 100% secure debian system? Michel Verdier <mv524@free.fr> - 2023-01-24 09:10 +0100
        Re: How to get 100% secure debian system? Michel Verdier <mv524@free.fr> - 2023-01-24 10:10 +0100
  Re: How to get 100% secure debian system? Ángel <debian-security@debian.16bits.net> - 2023-01-23 00:20 +0100

csiph-web