Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #197971

Re: trusting .deb packages

From Gene Heskett <gheskett@shentel.net>
Newsgroups linux.debian.user
Subject Re: trusting .deb packages
Date 2018-07-25 05:20 +0200
Message-ID <wfivg-7Nd-9@gated-at.bofh.it> (permalink)
References <wf7Jw-8gM-3@gated-at.bofh.it> <wfhSx-7i1-9@gated-at.bofh.it> <wfhSy-7i1-21@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Tuesday 24 July 2018 22:35:17 Matthew Crews wrote:

> On 7/24/18 7:17 PM, Rick Thomas wrote:
> > On Jul 24, 2018, at 2:41 PM, Matthew Crews 
<mailinglists@mattcrews.com> wrote:
> >> Personally, I have a low degree of trust for Mega.nz, so caveat
> >> emptor.
> >
> > Why do you say that?  (serious question!)  Have there been reports
> > of problems?
> >
> > Enjoy!
> > Rick
>
> A few reasons:
>
> 1. Kim Dotcom vs the United States. There is a strong chance Mr.
> Dotcom will be extradited to the United States (due to Megaupload and
> other criminal accusations), and will leave Mega without functional
> leadership.
>
That, from what I've read in the last 3 or 4 days, is essentially a done 
deal. It was said he's been "detained", presumably so our people can 
pick him up in the middle of the night when they can arrange the flight.

> 2. In light of Megaupload being shut down, there's no guarantee that
> Mega won't have the same fate at some point, considering the services
> are basically identical.
>
> 3. Their server software is not auditable. Even though the client-side
> and API are public, unless the server side is auditable, you cannot
> effectively trust it any better than Google Drive or Dropbox. Of
> course, few storage providers are, and even if they are, you should be
> using client-side encryption that you control, anyway.
>
> 4. There's always been something shady about Mega that I can't put my
> finger on.

Yeah, I looked at the site once 3 years or so back, and found its thirst 
for personal info plumb scary. Haven't looked since.

> Granted, these aren't the strongest reasons, but for me they are
> strong enough. Maybe I'm wrong though?

Those chances are pretty slim IMO.


-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

trusting .deb packages Anil Duggirala <anilduggirala@fastmail.fm> - 2018-07-24 17:50 +0200
  Re: trusting .deb packages Dan Ritter <dsr@randomstring.org> - 2018-07-24 18:50 +0200
    Re: trusting .deb packages Anil Duggirala <anilduggirala@fastmail.fm> - 2018-07-24 20:00 +0200
    Re: trusting .deb packages john doe <johndoe65534@mail.com> - 2018-07-24 20:40 +0200
      Re: trusting .deb packages Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-07-25 07:50 +0200
        Re: trusting .deb packages john doe <johndoe65534@mail.com> - 2018-07-25 11:40 +0200
    Re: trusting .deb packages Matthew Crews <mailinglists@mattcrews.com> - 2018-07-24 23:50 +0200
      Re: trusting .deb packages Rick Thomas <rbthomas@pobox.com> - 2018-07-25 04:40 +0200
        Re: trusting .deb packages Matthew Crews <mailinglists@mattcrews.com> - 2018-07-25 04:40 +0200
          Re: trusting .deb packages Gene Heskett <gheskett@shentel.net> - 2018-07-25 05:20 +0200
          Re: trusting .deb packages Ben Caradoc-Davies <ben@transient.nz> - 2018-07-25 05:40 +0200
        Re: trusting .deb packages Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-07-25 07:50 +0200
      Re: trusting .deb packages Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-07-25 08:00 +0200
        Re: trusting .deb packages Darac Marjal <mailinglist@darac.org.uk> - 2018-07-25 16:00 +0200
          Re: trusting .deb packages Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-07-25 17:40 +0200
            Re: trusting .deb packages Brian <ad44@cityscape.co.uk> - 2018-07-25 17:50 +0200
  Re: trusting .deb packages Ben Caradoc-Davies <ben@transient.nz> - 2018-07-25 00:00 +0200
    Re: trusting .deb packages Ben Caradoc-Davies <ben@transient.nz> - 2018-07-25 02:30 +0200
      Re: trusting .deb packages Anil Duggirala <anilduggirala@fastmail.fm> - 2018-07-25 03:10 +0200
        Re: trusting .deb packages Ben Caradoc-Davies <ben@transient.nz> - 2018-07-25 03:40 +0200

csiph-web