• corsicanguppy@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      5 months ago

      The question is always “how do you know” in security.

      But it’s not just AURs. DEBs have a long-standing gap in their package validation options (“how do you know that file is deployed as intended”) and they’re at risk.