Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #164540

Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System

From "Thomas Schmitt" <scdbackup@gmx.net>
Newsgroups linux.debian.user
Subject Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System
Date 2016-02-23 12:10 +0100
Message-ID <r5j0S-4sa-13@gated-at.bofh.it> (permalink)
References <r5iob-3Vb-37@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

Hi,

Nicolas George wrote:
> Of course, that does not mean MD5 and SHA-1 should be used nowadays. New
> theoretical attacks are found, keeping using hashes with known weaknesses is
> stupid.

The ISO checksums are provided more for transport verification than
for the fight against intentional mainpulation.
Signing the hash lists by PGP still seems a bit weak as protection.

But well, if Debian armors its ISOs, then it would have to scrutinize
the source of its packages, too.

Most important seems a permanent supervision of the web site content
from not publicly known client machines. Hash sums may be manipulated.
But the whole content of an ISO is either original or not. Easy to spot.


Have a nice day :)

Thomas

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

 Warning �~@~T Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System) Karen Lewellen <klewellen@shellworld.net> - 2016-02-22 19:10 +0100
  Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-22 20:30 +0100
    Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored  Operating System Karen Lewellen <klewellen@shellworld.net> - 2016-02-22 20:40 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-22 21:00 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Charlie Kravetz <cjk@teamcharliesangels.com> - 2016-02-22 22:00 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Stuart Longland <stuartl@longlandclan.id.au> - 2016-02-25 03:40 +0100
    Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Dalios <dalios@eumx.net> - 2016-02-22 23:00 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-22 23:20 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Sven Hartge <sven@svenhartge.de> - 2016-02-22 23:40 +0100
          Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 00:00 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-02-24 10:30 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-24 13:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System <tomas@tuxteam.de> - 2016-02-24 14:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-02-24 14:20 +0100
                OT: ownership of Mega.co.nz (was Re: Warning Linux Mint Website  Hacked and ISOs replaced with Backdoored Operating System) Jonathan Dowland <jmtd@debian.org> - 2016-02-24 15:00 +0100
    Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Gener Badenas <gener.ong.badenas@gmail.com> - 2016-02-23 02:40 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Glenn English <ghe@srv.slsware.net> - 2016-02-23 05:20 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 08:10 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Darac Marjal <mailinglist@darac.org.uk> - 2016-02-23 11:00 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 11:30 +0100
          Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 12:10 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 12:10 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 13:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 13:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-23 16:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 16:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-23 17:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 17:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System arian <debian@semioptimal.net> - 2016-02-23 17:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System arian <debian@semioptimal.net> - 2016-02-23 17:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 18:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System arian <debian@semioptimal.net> - 2016-02-23 18:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-23 21:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 11:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-27 06:30 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Henrique de Moraes Holschuh <hmh@debian.org> - 2016-02-25 15:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Stefan Monnier <monnier@iro.umontreal.ca> - 2016-02-25 15:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Stefan Monnier <monnier@iro.umontreal.ca> - 2016-02-25 15:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-25 16:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-25 21:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 16:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 17:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 17:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 18:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-23 19:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 20:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-23 20:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 11:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-24 12:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 13:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-24 15:30 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Richard Hector <richard@walnut.gen.nz> - 2016-02-24 10:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 11:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Richard Hector <richard@walnut.gen.nz> - 2016-02-24 11:10 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Seeker <seeker5528@comcast.net> - 2016-02-23 17:30 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 17:40 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System jdd <jdd@dodin.org> - 2016-02-23 12:10 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 12:40 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 13:30 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System "Andrew M.A. Cater" <amacater@galactic.demon.co.uk> - 2016-02-23 13:00 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-02-24 10:40 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 11:50 +0100

csiph-web