Hacker News new | past | comments | ask | show | jobs | submit login

Anyone know how this affects the ArchLinux packages? kernel.org is still the fastest mirror around for them.



Probably not at all (the Arch userbase isn't much of a target). That being said, pacman doesn't implement package-signing last time I checked so it certainly would be easier to pass off bogus packages than with other distros.


Pacman now supports package signature verification (it'svery recent news.)




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: