๐ Microsoft repo installed on all Raspberry Piโs
๐ก Newskategorie: Linux Tipps
๐ Quelle: reddit.com
In a recent update, the Raspberry Pi Foundation installed a Microsoft apt repository on all machines running Raspberry Pi OS (previously known as Raspbian) without the administratorโs knowledge.
Officially itโs because they endorse Microsoftโs IDE (!), but youโll get it even if you installed from a light image and use your Pi headless without a GUI. This means that every time you do โapt updateโ on your Pi you are pinging a Microsoft server.
They also install Microsoftโs GPG key used to sign packages from that repository. This can potentially lead to a scenario where an update pulls a dependency from Microsoftโs repo and that package would be automatically trusted by the system.
I switched all my Piโs to vanilla Debian but there are other alternatives too. Check the /etc/apt/sources.list.d and /etc/apt/trusted.gpg.d folders of your Piโs and decide for yourself.
[link] [comments] ...