How would an attacker inject a redirect into an apt package download?
MITM on the network, I guess like DNS takeover or the like.
So you pass through the upstream headers but then simulate a failure/resume and supply different contents for the resumed download.
[flagged]
alt Hacker News
MITM on the network, I guess like DNS takeover or the like.
So you pass through the upstream headers but then simulate a failure/resume and supply different contents for the resumed download.