pinning

Also, most endemic low-level crime is best fought with policies and eliminating poverty, not by pinning petty criminals after the damage is already done.

But anyways, plenty of people are working on this issue, with many suggestions, some even in place (cert pinning).

Do you just use pinning straight out the gate, or do you check backports (or whatever equivalent Ubuntu has) first?

The functionality of bundle install and bundle update are not replicated by apt pinning or holding.

An effect of pinning is losing the ability to perform a self MiTM to decrypt traffic; this post simply demonstrates bypassing that.

But there are ways to accomplish that without a CA such as certificate pinning.

I understand what you mean, but an attacker wouldn't be able to decrypt during a MiTM attack since SSL is being used -- regardless of cert pinning.

Instead of using public repos and pinning the version you want from them, you can run your own repo and import the versions you want.

We have elaborate plans to even add certificate pinning to the agent but that's on pause until we sort out larger infrastructure architecture.

It would be undetectable, and pinning wouldn't mitigate it.

It makes public key pinning hard (impossible?), though.

Is this based on PKI or pinning/caching?

What exactly do you mean by "stars, pinning, history links I can take from Slack and throw into Github issues, commits, or other SaaS team tools"?

Xen allows this for example: "vCPU Pinning for guests - You can dedicate a physical cpu to a particular virtual cpu or a set of virtual cpus." What exactly do you find hard to believe?

Pinning the bookmark to our homescreen generally works better (seriously, try it with Facebook and enjoy your 10% longer battery).