Reading about how WordPress updates can be used to compromise websites got me thinking; does anyone know how people ensure that Canonical won't push out a signed update that installs a backdoor to their servers?
This seems like it would be very tedious to do (recompiling and checking they're the same), but also more and more important now that major governments have shown their willingness to force companies to betray their customers.
If the open source nature of Canonical stops it from being able to push out poisoned updates (I suppose all mirrors compile stuff themselves and verify against a hash so it would be found out quick), how would one deal with securing non open source software stuff like Windows? Do you just not trust any machine (virtual or not) in your server farm running Windows?