Comment 9 for bug 1803914

Revision history for this message
Matt Corallo (bluematt) wrote :

Indeed, I'm less concerned about the packages here and more concerned with the fact that anyone, completely unbeknownst to upstream (which maintains official Ubuntu packages), or any users, was able to upload a package which Ubuntu would, by default, suggest users install to manage Bitcoin, with zero oversight whatsoever. This seems like a rather large attack vector to attack Ubuntu users en-masse.