{"contentHash":"96b9f5fd6e21595dbc2fa25a01919ea6129df336c0fe63abe62a832c34cf082c","protocol":"bitcoin","authorPubkey":"dd45969d162ebf34438cee1adc75938479b6c91fb7a36182af9dd4be3f964540","text":">On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges. https://ubuntu.com/security/CVE-2026-109518 Apt high vulnerability in Debian 12 onwards and Debian-based distributions. Time to change your sources URIs to HTTPS. I'm done being told HTTP is fine because APT verifies them anyway.","topicHash":"913c62c2ee31793c7e8517600dbc8f0c337afae133700a128a7d8ffb8a21c93e","topicName":"technology","parentHash":"00eaa9d56967f78be609413a437d5298cfe5ca70ca425f42a2a05639c73b717b","costSunk":"0","biasSupport":0,"biasOppose":0,"biasVouch":0,"biasNull":0,"blockHeight":null,"confirmations":0,"timestamp":"2026-11-06T18:07:18.101Z","tripFp":"7f272d02f554","viewCount":0,"powDifficulty":0,"relation":0,"ephemeral":true,"nonce":"4990091da0013d3b","sig":"19d4f3ac4fd64418bc3d8b65d4925bea8e1d707477bcb6bed0b53495b3220e9270009ad7313483f035025c293d90e78d0be19acc2a9b3aec91034eea92ff8ce3","ephStamp":{"blockHashHex":"00000000000000000001920d9b0769107ae1c037f3658a12ce04893e4421dc66","nonceHex":"245f000000000000"},"replyCount":0,"chainReplyCount":0,"vaporReplyCount":0,"clusterSize":1,"receiptHeight":974833,"expiryHeight":979153,"authorMarks":{"since":"2026-11-06T14:06:50.297Z","via":"sight","inscribed":0,"likes":0,"biases":0},"lang":"en","servedBy":{"host":"6af58b1822e0cabfe57d76540f745d059b438f489a796ec6a705c6540233845e","t":"2026-11-08T20:49:55.838Z","sig":"9baeca037b7561c6bf713a8bf9a706420a75a127df8e415cf4cbf8aad085f93391f5a8e0b2c6d6b87f84f62334ad340a2b61b8edbd34fd412f6ce7be37d44656","h":"000000000000000000018c3ca66fa23ed23da563a1b7e8e886b219d0afcd0e50"}}