On 2016-08-30 22:31, Yoshi wrote:
>  security hole in the
> "Ubuntu/Debian update mechanism" involving authentication and
> signatures

Got to be reffering to this:
https://www.schneier.com/blog/archives/2016/08/powerful_bit-fl.html

"breaking OpenSSH public-key authentication, and forging GPG signatures
from trusted keys"

Sounds like hard times for security experts and the web of trust. :(

-- 
Set Hallstrom aka sakrecoer

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
ubuntu-studio-devel mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-studio-devel

Reply via email to