Tags: english, debian, sikkerhet
Date: 2016-01-15 00:30
-<p>During his DebConf15 keynote, Jacob Applebaum
+<p>During his DebConf15 keynote, Jacob Appelbaum
<a href="https://summit.debconf.org/debconf15/meeting/331/what-is-to-be-done/">observed
that those listening on the Internet lines would have good reason to
believe a computer have a given security hole</a> if it download a
download took place shortly after a security fix was released, and
<a href="http://richardhartmann.de/blog/posts/2015/08/24-Tor-enabled_Debian_mirror/">proposed
to always use Tor to download packages from the Debian mirror</a>. He
-was not the first to propose this, as the <tt>apt-transport-tor</tt>
+was not the first to propose this, as the
+<tt><a href="https://tracker.debian.org/pkg/apt-transport-tor">apt-transport-tor</a></tt>
package by Tim Retout already existed to make it easy to convince apt
to use <a href="https://www.torproject.org/">Tor</a>, but I was not
aware of that package when I read the blog post from Richard.</p>
<p>Here is a short recipe for enabling this on your machine, by
installing <tt>apt-transport-tor</tt> and replacing http and https
-urls with tor+http and https, and using the hidden service instead of
-the official Debian mirror site. I recommend installing
+urls with tor+http and tor+https, and using the hidden service instead
+of the official Debian mirror site. I recommend installing
<tt>etckeeper</tt> before you start to have a history of the changes
done in /etc/.</p>
<blockquote><pre>
apt install apt-transport-tor
-sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list
+sed -i 's% http://ftp.debian.org/% tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list
sed -i 's% http% tor+http%' /etc/apt/sources.list
</pre></blockquote>
become normal for the machine in question.</p>
<p>On <a href="https://wiki.debian.org/FreedomBox">Freedombox</a>, APT
-is set up by deafult to use <tt>apt-transport-tor</tt> when Tor is
+is set up by default to use <tt>apt-transport-tor</tt> when Tor is
enabled. It would be great if it was the default on any Debian
system.</p>