Bug#788634: debian-installer: Accepting a preseed URL from DHCP allows attacker to hijack installation

2015-06-22 Thread Aliz 'Randomdude'
On 18 June 2015 at 14:11, Christian PERRIER wrote: > (no need to CC me or debian-boot to answers as bug report answers > already go to debian-boot) Ah, sorry. Thanks for letting me know. > Quoting Aliz 'Randomdude' (randomd...@gmail.com): > >> +Template: pres

Bug#788634: debian-installer: Accepting a preseed URL from DHCP allows attacker to hijack installation

2015-06-17 Thread Aliz 'Randomdude'
On 16 June 2015 at 10:37, Wouter Verhelst wrote: > > But if you boot off CD-ROM or USB or some such? Then the situation is > much different. While I agree that having preseeding in that case can be > useful, I can also understand the POV that the system *defaulting* to > using such a preseed file