Profile Image

Joanna Rutkowska

@rootkovska ↗

Deleted No
Hibernated No
Last Checked Nov. 19, 2022

Created

Mon Aug 29 13:35:47 +0000 2016

Likes

12

Retweets

10

Source

TweetDeck

View Raw Data

JSON Data

View on Twitter

Likely Available
Profile Image

Joanna Rutkowska @rootkovska

... because obviously if one does 'rpm -i <untrusted_rpm>' without prior 'rpm -K' (verify sig), then this is already a Game Over (TM). — PolitiTweet.org

Posted Aug. 29, 2016

Preceded By

Profile Image

Joanna Rutkowska @rootkovska

Are any of these could be triggered via 'rpm -K <rpm>'? If yes, this was serious indeed, otherwise... irrelevant? https://t.co/85zUMqcR2d — PolitiTweet.org

LWN.net @lwnnet

Böck: Multiple vulnerabilities in RPM – and a rant https://t.co/Fh057M6wSZ

Posted Aug. 29, 2016

Followed By

Profile Image

Joanna Rutkowska @rootkovska

Obviously 'rpm -i' means: take this rpm and execute whatever scripts it has. As root. — PolitiTweet.org

Posted Aug. 29, 2016