dinosaurdynasty
Joined 6 years ago
Karma
561
Submissions
308
Member since
Mar 23
Joined 6 years ago
Package size is unique enough that just seeing the size of the transfer will usually be enough to tell.
from the OP
APT can use HTTPS, but often doesn't, making a MITM attack easier (also the idea for a long time has been signatures are enough, and/or TLS certs used to be a lot harder to get, but at this point you should really be using both).
There is no way to, for instance, only allow updates to a PWA from files signed by an offline key.
If I search for battery stuff shows up, but they only ship bare batteries to the 48 states and Canada.
Contacting support should be able to help you too.