Mint mirrors update/ update reports

[kdlm]

I just installed a mint mirrors update, priority 1. Afterwards I thought that could be a clever way to take over someone's computer if it made your updates go to the wrong server. That's probably paranoia but I'd like a confirmation that it was a legitimate update and to know if there is a place where such things can be checked.

[karlchen]

Hello, kdlm.

Assuming that Linux Mint Update Manager brought the mint-mirrors update to you, it should be genuine. Just checked on packages.linuxmint.com. The current version of mint-mirrors is v1.1.3. So in case your mint-mirrors version is 1.1.3 as well, it will be the genuine version.

You might like to launch a terminal window, run the following commandlines and post their complete screen output here for inspection:

• Mint version and list of configured software repositories:

  Code: Select all

  inxi -Sr

  (capital S, lowercase r)
• Which Mint Mirrors have been installed and where from:

  Code: Select all

  apt-cache policy mint-mirrors

Cheers,
Karl

[Crewp]

I just installed a mint mirrors update, priority 1. Afterwards I thought that could be a clever way to take over someone's computer if it made your updates go to the wrong server. That's probably paranoia but I'd like a confirmation that it was a legitimate update and to know if there is a place where such things can be checked.

Yes, it is a legit update.

[killerbees19]

Afterwards I thought that could be a clever way to take over someone's computer if it made your updates go to the wrong server.

All packages have a digital signature which is whitelisted in your local package manager. Nobody can modify packages without having the private key(s) from Linux Mint. Sure, someone could, but it would throw out a big warning/confirmation message!

Even the mirror operators (like me) couldn't change package contents without attracting users attention. That's the security model behind APT.

[kdlm]

I though I might be a bit paranoid. Thanks for confirmation and explanation of security protocols.