Skip to content
Better HN
Top
Best
Ask
Show
New
Jobs
Search
⌘K
0 points
maaku
10y ago
0 comments
Save
Share
Collision attacks matter if you don't (want to) trust the Ubuntu release team.
0 comments
3 comments · 1 top-level
top
newest
oldest
Analemma_
10y ago
· 2 in thread
If you don't trust the Ubuntu release team, why are you downloading Ubuntu to begin with? Your threat model makes no sense.
maaku
OP
10y ago
It is not trust in Canonical itself that is the problem, but the constant threat of coercion it puts on both the organization and the people that compromise it. This is why I work on generalized multi-signature schemes and deterministic builds.
maaku
OP
10y ago
s/compromise/comprise/
j
/
k
navigate · click thread line to collapse