undefined | Better HN

0 pointspedroaraujo5y ago0 comments

But this doesn't grant remote access to your system, and it's not like Microsoft will start shipping replacements of core packages over this repo.

0 comments

SecurityLagoon5y ago

Technically it does grant another avenue of supply chain attack... but if Microsoft run mirrors are being compromised then we probably have much bigger issues than some raspberry pis.

moistbar5y ago

Considering the damage that can be done by botnets like Mirai, Raspberry Pis might be exactly what we should be worrting about.

j / k navigate · click thread line to collapse

0 pointspedroaraujo5y ago0 comments

But this doesn't grant remote access to your system, and it's not like Microsoft will start shipping replacements of core packages over this repo.

0 comments

SecurityLagoon5y ago

Technically it does grant another avenue of supply chain attack... but if Microsoft run mirrors are being compromised then we probably have much bigger issues than some raspberry pis.

moistbar5y ago

Considering the damage that can be done by botnets like Mirai, Raspberry Pis might be exactly what we should be worrting about.

j / k navigate · click thread line to collapse