synaptic

Questions about Grub, UEFI,the liveCD and the installer
Forum rules
Before you post please read how to get help

synaptic

Postby everton on Sun Aug 02, 2009 12:21 am

just a querry...whenever i install certain packages from synaptic i usally get a warning as it relates to safety...is it that dangerous packages exist in synaptic that might damage my pc or allow intruders to hack into my system?
everton
Level 2
Level 2
 
Posts: 51
Joined: Sun Jul 05, 2009 11:28 pm

Linux Mint is funded by ads and donations.
 

Re: synaptic

Postby DrHu on Sun Aug 02, 2009 12:36 am

everton wrote:just a querry...whenever i install certain packages from synaptic i usally get a warning as it relates to safety

What is the message you get..
http://www.mepislovers.org/forums/archi ... t-581.html

If its just about the unauthenticated packages and it is the Ubuntu/Mint repositories, you are probably fairly safe
--even if the developer has not digitally signed the package so that it could be authenticated
the difference between an http and an https connection..
also binary packages.. likely will be unauthenticated, like nvidia or Ati video drivers, nic drivers sound card drivers, that kind of item..

There are quite a lot of unauthenticated packages, since not everyone wants to sign or is maybe not aware of the recent idea that authenticating packages is a good public policy idea..
Last edited by DrHu on Sun Aug 02, 2009 12:44 am, edited 1 time in total.
User avatar
DrHu
Level 17
Level 17
 
Posts: 7098
Joined: Wed Jun 17, 2009 8:20 pm

Re: synaptic

Postby everton on Sun Aug 02, 2009 12:43 am

you are about to install software that cant be authenticated...doing this could allow a malicious individual to damage or take control of your system
everton
Level 2
Level 2
 
Posts: 51
Joined: Sun Jul 05, 2009 11:28 pm

Re: synaptic

Postby everton on Sun Aug 02, 2009 12:46 am

so the packages in synaptic are 100% safe then? was just wondering why i was getting those alerts
everton
Level 2
Level 2
 
Posts: 51
Joined: Sun Jul 05, 2009 11:28 pm

Re: synaptic

Postby DrHu on Sun Aug 02, 2009 1:01 am

everton wrote:so the packages in synaptic are 100% safe then? was just wondering why i was getting those alerts

I don't think anyone can say that, it would be irrational.

You might want to know that there seems to be only one 100% guarantee in life; death and taxes..
User avatar
DrHu
Level 17
Level 17
 
Posts: 7098
Joined: Wed Jun 17, 2009 8:20 pm

Re: synaptic

Postby everton on Sun Aug 02, 2009 1:16 am

lol...well said...so about what percentage would you add to it?
everton
Level 2
Level 2
 
Posts: 51
Joined: Sun Jul 05, 2009 11:28 pm

Re: synaptic

Postby emorrp1 on Sun Aug 02, 2009 4:38 am

it's safe enough that you don't have to worry about it. Given that there are tens of thousands of packages available, and there might be only a few that were bad, I'd say 100% to 3 significant figures.
If you have a question that has been answered and solved, then please edit your original post and put a [SOLVED] at the end of your subject header
Hint - use a google search including the search term site:forums.linuxmint.com
emorrp1
Level 8
Level 8
 
Posts: 2322
Joined: Thu Feb 26, 2009 8:58 pm

Re: synaptic

Postby Fred on Sun Aug 02, 2009 10:36 am

everton,

Programs in the repos are vetted by Ubuntu developers, before that they are vetted by the Debian developers, and before that by the projects that wrote them. In the general scheme of things you are less likely to get tainted programs from the official repos than any other source.

The warning you are getting just says that you don't have the pgp key to verify that you are downloading from a given repo.

Fred
Insanity: Doing the same thing over and over and each time expecting a different result.

Democracy is 2 wolves and a lamb voting on the menu. Liberty is an armed lamb protesting the electoral outcome. A Republic negates the need for an armed protest.
User avatar
Fred
Level 10
Level 10
 
Posts: 3356
Joined: Fri Jan 04, 2008 11:59 am
Location: NC USA

Re: synaptic

Postby turkka on Tue Aug 04, 2009 6:39 am

Fred wrote:The warning you are getting just says that you don't have the pgp key to verify that you are downloading from a given repo.

Fred


Ok, but will these programs be updated when an update is available or is the pgp key required to do that?

-- Just wondering...
Tripping through the life fantastic / lose a step and never get up / Left alone with a cold blank stare / I feel like giving up
User avatar
turkka
Level 1
Level 1
 
Posts: 10
Joined: Mon Aug 03, 2009 5:43 am
Location: Finland

Linux Mint is funded by ads and donations.
 

Return to Installation & Boot

Who is online

Users browsing this forum: No registered users and 14 guests