Attacks on package managers

Posted Apr 15, 2009 9:26 UTC (Wed) by hppnq (guest, #14462)
In reply to: Attacks on package managers by tialaramex
Parent article: Attacks on package managers

Obviously a backup is not going to help against perpetrators.

But perhaps the only way of ensuring that you are running trustworthy code, is not to "choose a distribution you can trust", but to put your trustworthy code on offline storage and make sure you run that code only.

Serious shops really do not run package managers on their precious database systems.