We use local Ubuntu repository mirrors, because our external traffic is not free. Whenever I apt-get install "program"
it gets from that repository.
The question is... can the maintainers of the repository substitute any package on the repository with their own package?
Can I be hacked easily on any apt-get upgrade
or apt-get install
or apt-get dist-upgrade
?
We get very basic packages from the local Ubuntu mirrors, such as "telnet" or any other.