On my own computer, I have been used to run apt-get upgrade directly for years.
But few days ago I have a chance to admin a ubuntu server. I guess my old habit is bad.
Should/how I update security updates only to minimize dependence issus?
And how can I confirm the source is trustworthy(by SHA or other hash), keep the middleman attack away?
