I trust Debian, and I do trust Firefox. I also trust Node, NPM, and Yarn. But I ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		skydhash 6 months ago \| parent \| context \| favorite \| on: Malicious versions of Nx and some supporting plugi... I trust Debian, and I do trust Firefox. I also trust Node, NPM, and Yarn. But I don’t trust the myriad packages in some rando projects. So who I trust got installed by apt. Anyone else is relocated to a VM or some kind of sandbox.

mr_mitm 6 months ago [–]

So your issue isn't related to auto updates at all, not even "almost always"

skydhash 6 months ago | [–]

Apt doesn't autoupdate.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact