[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Discarding uploaded binary packages

On Tue, 16 Oct 2012, Jakub Wilk <jwilk@debian.org> wrote:
> * martin f krafft <madduck@debian.org>, 2012-10-16, 08:21:
> >>This is my opinion but I admit I have not followed previous
> >>discussions on the subject....
> >
> >http://lists.debian.org/debian-security/2004/09/msg00014.html
> >
> >We have not cared enough for almost 20 years that 9 out of 10 binary
> >packages in use (i386 until 2005, amd64 since then) are built on
> >machines that are individually maintained according to widely varying
> >security standards to do anything about it, AFAICT.
> What makes a buildd more secure than a machine of J. Random Developer?
> I'm honestly curious.

I believe that the sysadmin skill of the people who run the build servers is 
greater than that of most DDs.

The Debian servers are run in relatively secure environments as opposed to DD 
workstations being laptops that are often stored in hotel rooms and other 
fairly insecure environments.

There are a fairly small number of Debian servers.  So even if the probability 
of system compromise for a Debian server was the same as for a laptop owned by 
a random DD the fact that DD workstations outnumber Debian servers by at least 
200:1 makes them more of a risk.

One final think to note is that if an attacker manages to compromise a Debian 
server they will probably start by compromising the workstation used by a 
random DD.  So I don't think that the case of a compromised server with 
thousands of secure workstations is a case to prepare for, but the case of 
compromised workstation(s) before a compromised server is one to prepare for.

My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/

Reply to: