We have have a serious problem with the abuse of our networks by both
state and civilian actors.  Cyberwarfare and psyops is a big part of the
massive war campaign in the USA.

It's really a serious shame that the main install repository from the
most popular distribution for machine learning (it is part of the
default stack for Google's TensorFlow, along with Python/Nvidia) doesn't
have basic system integrity.

I can understand that it might be more expensive to bother with an HTTPS
server for the bulk download and that the certicate authorities have
been compromised in the past.

Nonetheless, not having the MD5 and SH5 hashes on a verified HTTPS
connection is just recklessly, lazy security.  I know Canonical has deep
roots in security, and I'm just an ignoramus.

But seriously, it doesn't make sense that the initial install is the
perfect target for any abusive cyberops Freedom Center.  I know you guys
in South Africa must feel like, But we ARE the establishment, what do WE
have to fear.  There is no punishment for dissent.

In the USA, things are more controversial, and numerous factions tend to
abuse power much like in communist states.

Could we please have secure install images?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1359836

Title:
  Ubuntu ISOs downloaded insecurely, over HTTP rather than HTTPS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/1359836/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to