Installed the Fedora Remix from https://www.fedoravforce.org on my new Milk-V Jupiter (yes, I have a thing for weird computers), saw a message about skipped PGP checks, and...

Installed the Fedora Remix from https://www.fedoravforce.org on my new Milk-V Jupiter (yes, I have a thing for weird computers), saw a message about skipped PGP checks, and...

[fedora-spacemit-k1]
name=Fedora SpacemiT K1
baseurl=http://openkoji.iscas.ac.cn/pub/dist-repos/dl/SpacemiT/K1_M1/repos/
enabled=1
priority=1
gpgcheck=0

No HTTPS either any network attacker can install whatever they want.

@filippo holy fucking skull emoji

@filippo Secure software distribution is one of those things that keep getting re-uninvented.

@filippo something along the anakin-padme meme of "i've disabled PGP to prevent RCE attacks", "you have something better replacing it, right??", " "

@filippo