The 'is my Mint safe?' thread (after Feb 20th 2016 hacks)

Chat about anything related to Linux Mint
lawnmower
Level 1
Level 1
Posts: 48
Joined: Wed May 21, 2014 4:03 pm

Re: The 'is my Mint safe?' thread (after Feb 20th 2016 hacks)

Post by lawnmower » Thu Mar 03, 2016 7:43 am

killer de bug wrote:It's already the case. The sum is also posted on the blog.
Might I suggest not to post it on the site then so as not to provide potentially false hope? I realize all things are compromises but if its already available elsewhere, why keep the post on the site? On further reading perhaps md5 isn't really that good anyway?

https://micahflee.com/2016/02/backdoore ... checksums/
Verifying is PGP signatures is more complicated and harder to explain than comparing checksums, but it’s actually secure. It’s the only way to be sure that a Linux installer ISO you download hasn’t been tampered with since the image was built by the developers. Tails is an example of an operating system that does an excellent job at explaining how to verify PGP signatures when you download their ISO.


davidC100
Level 1
Level 1
Posts: 2
Joined: Fri Mar 04, 2016 11:55 am

Recent security issue

Post by davidC100 » Fri Mar 04, 2016 12:34 pm

Hi! First time I have used this forum, so apologies if this is in the wrong place!
I have just discovered about the security breach of the forum logins etc. on Feb 20th. Can I safely assume that if my Linux Mint installation dates from around july 2015 (Linux Mint 17 Quiana 3.13.0-24-generic i686) it would not be affected by compromised ISOs? What about subsequent updates?

Thanks

User avatar
karlchen
Level 20
Level 20
Posts: 11401
Joined: Sat Dec 31, 2011 7:21 am
Location: Germany

Re: Recent security issue

Post by karlchen » Fri Mar 04, 2016 12:45 pm

Hello, davidC100.

You can be re-assured.
The intruders did not upload any infected ISO-images to the Linux Mint servers on February 20th, 2016.
Instead they manipulated published download links on the Linux Mint webpage so that they pointed to an infected Linux Mint 17.3 Cinnamon ISO image on a server in Bulgaria.
As a consequence, updating form the official software repositories has not delivered any manipulated software packages to the Linux Mint users.

Best regards,
Karl
Image
Linux Mint 19.2 32-bit xfce Desktop, Total Commander 9.22a 32-bit
Haß gleicht einer Krankheit, dem Miserere, wo man vorne herausgibt, was eigentlich hinten wegsollte. (Goethe)

davidC100
Level 1
Level 1
Posts: 2
Joined: Fri Mar 04, 2016 11:55 am

Re: Recent security issue

Post by davidC100 » Fri Mar 04, 2016 1:05 pm

Thanks! That's great. I want to keep my Mint - mint!!

Post Reply

Return to “Chat about Linux Mint”