{"pubkey":"dd45969d162ebf34438cee1adc75938479b6c91fb7a36182af9dd4be3f964540","posts":[{"contentHash":"96b9f5fd6e21595dbc2fa25a01919ea6129df336c0fe63abe62a832c34cf082c","protocol":"bitcoin","authorPubkey":"dd45969d162ebf34438cee1adc75938479b6c91fb7a36182af9dd4be3f964540","text":">On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges. https://ubuntu.com/security/CVE-2026-109518 Apt high vulnerability in Debian 12 onwards and Debian-based distributions. Time to change your sources URIs to HTTPS. I'm done being told HTTP is fine because APT verifies them anyway.","topicHash":"913c62c2ee31793c7e8517600dbc8f0c337afae133700a128a7d8ffb8a21c93e","topicName":"technology","parentHash":"00eaa9d56967f78be609413a437d5298cfe5ca70ca425f42a2a05639c73b717b","costSunk":"0","biasSupport":0,"biasOppose":0,"biasVouch":0,"biasNull":0,"blockHeight":null,"confirmations":0,"timestamp":"2026-11-06T18:07:18.101Z","tripFp":"7f272d02f554","viewCount":0,"powDifficulty":0,"relation":0,"ephemeral":true,"nonce":"4990091da0013d3b","sig":"19d4f3ac4fd64418bc3d8b65d4925bea8e1d707477bcb6bed0b53495b3220e9270009ad7313483f035025c293d90e78d0be19acc2a9b3aec91034eea92ff8ce3","ephStamp":{"blockHashHex":"00000000000000000001920d9b0769107ae1c037f3658a12ce04893e4421dc66","nonceHex":"245f000000000000"},"replyCount":0,"chainReplyCount":0,"vaporReplyCount":0,"clusterSize":1,"receiptHeight":974833,"expiryHeight":979153,"authorMarks":{"since":"2026-11-06T14:06:50.297Z","via":"sight","inscribed":0,"likes":0,"biases":0},"lang":"en"}],"nextCursor":null,"pageReceipt":{"host":"6af58b1822e0cabfe57d76540f745d059b438f489a796ec6a705c6540233845e","t":"2026-11-08T21:10:39.610Z","sig":"2f38c24ea31899fcf699e0933502991df8aebb25b3ed87b51e5a6593755d59c052e9b4cf76a8ab7ed7a44c9a7d3ca26f4b03b05098a01d5c80aedec6ffa88eb9"},"marks":{"since":"2026-11-06T14:06:50.297Z","via":"sight","inscribed":0,"likes":0,"biases":0}}