I let the default boot and checked the live-cd feature set first, then
proceeded to the "almost" default install (only deviating for manual
partitioning with swap and a single ext4 root partition) to check all
the standard features and enable the full 3D desktop support (onboard
Intel).  All very slick!  Finally, I accepted all the first-day updates
- no surprises.  But when advancing to the individual packages, none of
the repositories were authenticated.  Therefore, I was using the
default, generic, "Unites States" repository "selection" so I don't know
where the packages were actually pulled from.  This happend on two
different systems that day, so I suppose there is a chance they chose
the same site(s) each time.

I will redo the package installations after hard-coding actual, specific
servers to see if, or how often, I can reproduce the trouble....

My development systems are about 50 miles away, and I won't see them
again for three days.  So I'll plan to do that first thing (Monday).
I'm writing back now just to let you know in advance because I did
report this as a possible "security" problem and I don't want to add
delays.  But, apparently, if others aren't complaining by now, then it
must have just been a fluke - it was the first day of the release - but
I would imagine it shouldn't be possible to get an unauthenticated
repository, in any case.

-- 
Software Repositories Missing Authentication
https://bugs.launchpad.net/bugs/365887
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to