[Bug 756317] Re: Captive portals may corrupt apt translation indices

[Bryan]

I see that there are http and https methods for downloading items.  What if
we just removed http download of files and defaulted to https?  This would
neatly guarantee that a captive portal (either broken or malicious) cannot
get away with pretending to be a download server.  Assuming https is
implemented properly, we would have authentication and encryption of all
downloads.

Bryan Harris, PE
Research Engineer
Structures and Materials Evaluation Group
University of Dayton Research Institute
bryan.harris at udri.udayton.edu
http://www.udri.udayton.edu/
(937) 229-5561


On Fri, Mar 21, 2014 at 6:32 PM, Bryan Harris <brywilharris at gmail.com>wrote:

> I'm willing to spend some time working on a patch.
>
> Does anybody have an idea where in the code a syntax check should go?
>
> Bryan Harris, PE
> Research Engineer
> Structures and Materials Evaluation Group
> University of Dayton Research Institute
> bryan.harris at udri.udayton.edu
> http://www.udri.udayton.edu/
> (937) 229-5561
>
>
> On Fri, Mar 21, 2014 at 4:41 PM, Monsta <756317 at bugs.launchpad.net> wrote:
>
>> It's problematic for one simple reason: APT ceases to function normally
>> until you remove the offending files and update the package index again.
>>
>> --
>> You received this bug notification because you are subscribed to a
>> duplicate bug report (1055614).
>> https://bugs.launchpad.net/bugs/756317
>>
>> Title:
>>   Captive portals may corrupt apt translation indices
>>
>> Status in "apt" package in Ubuntu:
>>   Confirmed
>> Status in "apt" package in Debian:
>>   New
>>
>> Bug description:
>>   I have an adsl modem which returns an html page if the adsl link is
>>   broken. This page ends as the content of the apt cache files stored in
>>   /var/lib/apt/lists, which breaks apt.
>>
>>   The only way to make apt work again is to delete all the files stored
>>   in /var/lib/apt/lists.
>>
>> To manage notifications about this bug go to:
>> https://bugs.launchpad.net/ubuntu/+source/apt/+bug/756317/+subscriptions
>>
>
>

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/756317

Title:
  Captive portals may corrupt apt translation indices

Status in “apt” package in Ubuntu:
  Confirmed
Status in “apt” package in Debian:
  New

Bug description:
  I have an adsl modem which returns an html page if the adsl link is
  broken. This page ends as the content of the apt cache files stored in
  /var/lib/apt/lists, which breaks apt.

  The only way to make apt work again is to delete all the files stored
  in /var/lib/apt/lists.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/756317/+subscriptions