• fmstrat@lemmy.nowsci.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    15 days ago

    Just gonna drop this one in here.

    https://github.com/ventoy/PXE/issues/106

    Ventoy PXE used by iVentoy installing malware and fraudulent CA certs from… you guessed it, binary blobs. The primary dev is now in damage control in another issue and moving forward on updating the primary repo. Good on them.

    So, yea, not a minor thing, even for Ventoy.