HulaHoop:
- I haven’t tested the Electrum version out on Stretch yet to know
if backports are still needed now or will be soon.
Unrelated. Backports not needed in stretch. (Tested by me.)
This is about Whonix 14 / jessie based. The argument is, that
/etc/apt/preferences.d/debian-pinning.pref either/and/or Pin: release a=stable
/ Pin: release a=testing
is causing Whonix 13 stable
upgrades of Debian packages to break Whonix. Installs a newer kernel
which then breaks it.
https://forums.whonix.org/t/critical-x-wont-start-after-yesterdays-debian-upgrade
cc’d you, because you originally added debian-pinning.pref.
Then congrats you, you system is broken and you can be compromised.
Many packets in system now installed from backports repo. Because
now Debian 8 jessie named “oldstable”, and not “stable” as
described in guide.Source? Its the first time I hear that apt can be compromised just by
using pinning. Unless you mean its an old package that no longer
receives sec updates - that would make more sense.
Compromised might be the wrong word here. Not in a sense that a third
party can access/control your Whonix VM. But serious nonetheless.
Rendering Whonix unbootable.