During his DebConf15 keynote, Jacob Applebaum +
During his DebConf15 keynote, Jacob Appelbaum observed that those listening on the Internet lines would have good reason to believe a computer have a given security hole if it download a @@ -14,7 +14,8 @@ to interfere download size to security patches or the fact that download took place shortly after a security fix was released, and proposed to always use Tor to download packages from the Debian mirror. He -was not the first to propose this, as the apt-transport-tor +was not the first to propose this, as the +apt-transport-tor package by Tim Retout already existed to make it easy to convince apt to use Tor, but I was not aware of that package when I read the blog post from Richard.
@@ -27,14 +28,14 @@ making sure the network traffic always were encrypted.Here is a short recipe for enabling this on your machine, by installing apt-transport-tor and replacing http and https -urls with tor+http and https, and using the hidden service instead of -the official Debian mirror site. I recommend installing +urls with tor+http and tor+https, and using the hidden service instead +of the official Debian mirror site. I recommend installing etckeeper before you start to have a history of the changes done in /etc/.
apt install apt-transport-tor -sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list +sed -i 's% http://ftp.debian.org/% tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list sed -i 's% http% tor+http%' /etc/apt/sources.list