Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #221616

Re: DOH (was: geolocation services disabled and Gnome maps)

From Celejar <celejar@gmail.com>
Newsgroups linux.debian.user
Subject Re: DOH (was: geolocation services disabled and Gnome maps)
Date 2020-04-17 05:30 +0200
Message-ID <zWpRv-73P-1@gated-at.bofh.it> (permalink)
References (6 earlier) <zV1xT-3Jx-7@gated-at.bofh.it> <zVgng-4y3-15@gated-at.bofh.it> <zVs54-3v1-1@gated-at.bofh.it> <zVD0u-1We-15@gated-at.bofh.it> <zVOIh-FE-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Wed, 15 Apr 2020 07:49:28 -0400
Greg Wooledge <wooledg@eeg.ccf.org> wrote:

> On Tue, Apr 14, 2020 at 07:12:47PM -0400, Lee wrote:
> > On 4/14/20, Greg Wooledge <wooledg@eeg.ccf.org> wrote:
> > > Accessing the mirrors via https makes the packages un-cacheable, which
> > > makes the traffic volume significantly greater -- and the package lists
> > > are already signed, so there's no gain in trustworthiness of the packages.
> > >
> > > Some people may cite "privacy", as in "I don't want them to know which
> > > window manager I use", or something... I do not understand this
> > > argument, frankly.  It sounds paranoid to me.
> > 
> > How about people that cite "security"?  And yes, I take the simplistic
> > approach that encrypted=good and clear-text=bad but clear-text allows
> > things like
> >   https://www.guardicore.com/2019/01/a-vulnerability-in-debians-apt-allows-for-easy-lateral-movement-in-data-centers
> > 
> > my understanding is that vuln wouldn't have existed if https had been used.
> 
> That was a one-time bug, and was fixed quickly.  People have blown it
> way out of proportion.
> 
> The general answer for people who think "it's not https so it's not secure"
> is already given at <https://whydoesaptnotusehttps.com/>.

As that site notes:

> However there may be other security benefits to using HTTPS for apt
> updates, in that it should greatly increase the difficulty for a
> man-in-the-middle attacker to exploit future bugs in APT, or to

IIUC, this is pretty much what happened to OpenWRT recently:

https://arstechnica.com/information-technology/2020/03/openwrt-is-vulnerable-to-attacks-that-execute-malicious-code/

They were using SHA2565 checksums to verify packages, not GPG signing,
but the vulnerability was caused by buggy code that allowed the hash
check to be bypassed, which I suppose could hit a GPG based system
as well ...

Celejar

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-09 15:00 +0200
  Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-09 16:50 +0200
  Re: geolocation services disabled and Gnome maps David Wright <deblis@lionunicorn.co.uk> - 2020-04-09 16:50 +0200
    Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 16:50 +0200
      Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-11 17:00 +0200
        Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-11 17:40 +0200
          Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-11 18:00 +0200
            Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-11 18:10 +0200
              Re: geolocation services disabled and Gnome maps Celejar <celejar@gmail.com> - 2020-04-13 15:50 +0200
                Re: geolocation services disabled and Gnome maps David Wright <deblis@lionunicorn.co.uk> - 2020-04-13 23:10 +0200
          Re: geolocation services disabled and Gnome maps Brad Rogers <brad@fineby.me.uk> - 2020-04-11 18:00 +0200
          Re: geolocation services disabled and Gnome maps Joe <joe@jretrading.com> - 2020-04-11 20:50 +0200
            Re: geolocation services disabled and Gnome maps John Hasler <jhasler@newsguy.com> - 2020-04-12 01:20 +0200
              Re: geolocation services disabled and Gnome maps Gene Heskett <gheskett@shentel.net> - 2020-04-12 02:40 +0200
                Re: geolocation services disabled and Gnome maps Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 09:20 +0200
                Re: geolocation services disabled and Gnome maps John Hasler <jhasler@newsguy.com> - 2020-04-12 20:20 +0200
      Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 17:00 +0200
        Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-11 17:50 +0200
          Re: geolocation services disabled and Gnome maps Brad Rogers <brad@fineby.me.uk> - 2020-04-11 18:00 +0200
            Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-11 18:20 +0200
          Re: geolocation services disabled and Gnome maps rhkramer@gmail.com - 2020-04-11 22:10 +0200
            Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-11 22:20 +0200
              Re: geolocation services disabled and Gnome maps rhkramer@gmail.com - 2020-04-12 02:30 +0200
                Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-12 10:10 +0200
                Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-12 10:20 +0200
                Re: geolocation services disabled and Gnome maps Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 10:50 +0200
                Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-12 11:50 +0200
                Re: geolocation services disabled and Gnome maps Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 16:20 +0200
                Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-12 17:00 +0200
                Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-12 12:20 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Reco <recoverym4n@enotuniq.net> - 2020-04-12 12:30 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) <tomas@tuxteam.de> - 2020-04-12 12:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Reco <recoverym4n@enotuniq.net> - 2020-04-12 13:10 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) <tomas@tuxteam.de> - 2020-04-12 15:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Lee <ler762@gmail.com> - 2020-04-13 01:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Reco <recoverym4n@enotuniq.net> - 2020-04-13 07:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-13 10:20 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Reco <recoverym4n@enotuniq.net> - 2020-04-13 12:00 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) <tomas@tuxteam.de> - 2020-04-13 12:10 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Liam O'Toole <liam.p.otoole@gmail.com> - 2020-04-13 13:20 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Reco <recoverym4n@enotuniq.net> - 2020-04-13 15:30 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Liam O'Toole <liam.p.otoole@gmail.com> - 2020-04-13 17:20 +0200
                Re: DOH John Hasler <jhasler@newsguy.com> - 2020-04-13 17:40 +0200
                Re: DOH "Liam O'Toole" <liam.p.otoole@gmail.com> - 2020-04-14 22:10 +0200
                Re: DOH Reco <recoverym4n@enotuniq.net> - 2020-04-14 22:50 +0200
                Re: DOH Liam O'Toole <liam.p.otoole@gmail.com> - 2020-04-14 23:30 +0200
                Re: DOH Celejar <celejar@gmail.com> - 2020-04-15 00:00 +0200
                Re: DOH John Hasler <jhasler@newsguy.com> - 2020-04-15 01:10 +0200
                Re: DOH Liam O'Toole <liam.p.otoole@gmail.com> - 2020-04-15 01:30 +0200
                Re: DOH Reco <recoverym4n@enotuniq.net> - 2020-04-15 09:00 +0200
                Re: DOH John Hasler <jhasler@newsguy.com> - 2020-04-13 17:30 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Lee <ler762@gmail.com> - 2020-04-14 00:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Reco <recoverym4n@enotuniq.net> - 2020-04-14 08:20 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Lee <ler762@gmail.com> - 2020-04-14 13:10 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) nito@dismail.de - 2020-04-14 13:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Greg Wooledge <wooledg@eeg.ccf.org> - 2020-04-14 14:10 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Reco <recoverym4n@enotuniq.net> - 2020-04-14 15:30 +0200
                Re: DOH John Hasler <jhasler@newsguy.com> - 2020-04-14 17:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Celejar <celejar@gmail.com> - 2020-04-14 05:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Lee <ler762@gmail.com> - 2020-04-14 11:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Celejar <celejar@gmail.com> - 2020-04-14 19:00 +0200
                Re: DOH John Hasler <jhasler@newsguy.com> - 2020-04-14 19:20 +0200
                Re: DOH Celejar <celejar@gmail.com> - 2020-04-15 00:00 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) <tomas@tuxteam.de> - 2020-04-13 09:20 +0200
                Re: DOH John Hasler <jhasler@newsguy.com> - 2020-04-13 17:20 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Lee <ler762@gmail.com> - 2020-04-14 01:10 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) tomas@tuxteam.de - 2020-04-14 10:10 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Greg Wooledge <wooledg@eeg.ccf.org> - 2020-04-14 13:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-14 16:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Lee <ler762@gmail.com> - 2020-04-15 01:20 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Greg Wooledge <wooledg@eeg.ccf.org> - 2020-04-15 13:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) David Wright <deblis@lionunicorn.co.uk> - 2020-04-15 16:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Celejar <celejar@gmail.com> - 2020-04-17 05:30 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Gene Heskett <gheskett@shentel.net> - 2020-04-12 13:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) <tomas@tuxteam.de> - 2020-04-12 15:40 +0200
                Re: DOH Michael Howard <mike@dewberryfields.co.uk> - 2020-04-12 15:50 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Gene Heskett <gheskett@shentel.net> - 2020-04-12 18:10 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) Tixy <tixy@yxit.co.uk> - 2020-04-12 14:40 +0200
                Re: DOH (was: geolocation services disabled and Gnome maps) <tomas@tuxteam.de> - 2020-04-12 15:50 +0200
                Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-12 15:00 +0200
          Re: geolocation services disabled and Gnome maps Joe <joe@jretrading.com> - 2020-04-11 23:40 +0200
            Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-12 10:00 +0200
          Re: geolocation services disabled and Gnome maps Celejar <celejar@gmail.com> - 2020-04-13 16:00 +0200
            Re: geolocation services disabled and Gnome maps Richard Owlett <rowlett@cloud85.net> - 2020-04-13 16:40 +0200
            Re: geolocation services disabled and Gnome maps Michael Howard <mike@dewberryfields.co.uk> - 2020-04-13 16:40 +0200
      Re: geolocation services disabled and Gnome maps John Hasler <jhasler@newsguy.com> - 2020-04-11 17:10 +0200
  Re: geolocation services disabled and Gnome maps John Hasler <jhasler@newsguy.com> - 2020-04-09 18:20 +0200
    Re: geolocation services disabled and Gnome maps "Anil Felipe Duggirala" <anilduggirala@fastmail.fm> - 2020-04-10 15:30 +0200
      Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-10 15:50 +0200
        Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-10 16:30 +0200
          Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 16:40 +0200
        Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 16:30 +0200
      Re: geolocation services disabled and Gnome maps John Hasler <jhasler@newsguy.com> - 2020-04-10 16:30 +0200
      Re: geolocation services disabled and Gnome maps Reco <recoverym4n@enotuniq.net> - 2020-04-10 17:00 +0200
        Re: geolocation services disabled and Gnome maps Reco <recoverym4n@enotuniq.net> - 2020-04-10 17:20 +0200
          Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-10 17:40 +0200
            Re: geolocation services disabled and Gnome maps Reco <recoverym4n@enotuniq.net> - 2020-04-10 17:50 +0200
              Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-10 18:10 +0200
              Re: geolocation services disabled and Gnome maps John Hasler <jhasler@newsguy.com> - 2020-04-10 20:00 +0200
            Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-10 18:00 +0200
              Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-10 18:20 +0200
                Re: geolocation services disabled and Gnome maps <tomas@tuxteam.de> - 2020-04-10 18:40 +0200
                Re: geolocation services disabled and Gnome maps David Wright <deblis@lionunicorn.co.uk> - 2020-04-10 18:40 +0200
              Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 16:40 +0200
                Re: geolocation services disabled and Gnome maps tomas@tuxteam.de - 2020-04-11 16:50 +0200
            Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 16:40 +0200
              Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-11 17:30 +0200
        Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-10 17:20 +0200
        Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 16:30 +0200
          Re: geolocation services disabled and Gnome maps Reco <recoverym4n@enotuniq.net> - 2020-04-11 17:20 +0200
          Re: geolocation services disabled and Gnome maps Greg Wooledge <wooledg@eeg.ccf.org> - 2020-04-13 13:40 +0200
      Re: geolocation services disabled and Gnome maps David Wright <deblis@lionunicorn.co.uk> - 2020-04-10 17:20 +0200
        Re: geolocation services disabled and Gnome maps John Hasler <jhasler@newsguy.com> - 2020-04-10 20:00 +0200
      Re: geolocation services disabled and Gnome maps Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-11 09:40 +0200
        Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-11 10:30 +0200
        Re: geolocation services disabled and Gnome maps Anil F Duggirala <anilduggirala@fastmail.fm> - 2020-04-11 16:50 +0200
  Re: geolocation services disabled and Gnome maps mick crane <mick.crane@gmail.com> - 2020-04-10 19:00 +0200
    Re: geolocation services disabled and Gnome maps Curt <curty@free.fr> - 2020-04-10 20:00 +0200

csiph-web