Profile Image

Joanna Rutkowska

@rootkovska ↗

Deleted No
Hibernated No
Last Checked Nov. 19, 2022

Created

Mon Aug 29 13:50:38 +0000 2016

Likes

1

Retweets

0

Source

TweetDeck

View Raw Data

JSON Data

View on Twitter

Likely Available
Profile Image

Joanna Rutkowska @rootkovska

@robertswiecki @hanno Which is a pity. E.g. we rely on embedded sigs in Qubes to verify each RPM offered to Dom0: https://t.co/8PT8XNfa2C — PolitiTweet.org

Posted Aug. 29, 2016

Preceded By

Profile Image

Joanna Rutkowska @rootkovska

@robertswiecki @hanno AFAIU in case of debs there is no way for dpkg to verify sug, b/c the sig is not part of the deb pkgs...? — PolitiTweet.org

Posted Aug. 29, 2016

Followed By

Profile Image

Joanna Rutkowska @rootkovska

@robertswiecki @hanno But b/c RPMs do (can) have embedded sigs, I think it would be prudent to have '-i' verify them (enabled via /etc). — PolitiTweet.org

Posted Aug. 29, 2016