We use local Ubuntu repository mirrors, because our external traffic is not free. Whenever I
apt-get install "program" it gets from that repository.
The question is... can the maintainers of the repository substitute any package on the repository with their own package?
Can I be hacked easily on any
apt-get upgrade or
apt-get install or
We get very basic packages from the local Ubuntu mirrors, such as "telnet" or any other.