On Thursday 24 April 2003 12:18, Dave Smith wrote:
There are other issues with this - apart from the extra bandwidth that SuSE's site would experience (since making it easier will cause more people to use it)
I suspect that's why they're using mirrors. I hope you're not doing all your updating from ftp.suse.com
, it would also make the automatic update site a prime target for cracking - all a cracker would have to do would be to get in to SuSE's site, and within hours, they would own hundreds, thousands, or even hundreds of thousands of boxes worldwide.
I suspect that's why they're signing their packages. A cracker would not only have to get their hands on the SuSE official key, they'd also have to crack the pass phrase for it. Not incredible, but it's not exactly simple either.