Hacker News new | past | comments | ask | show | jobs | submit login

>The opkg repos and install files are all downloaded over http.

This was a problem because of the bug. But now it isn't one anymore. 'opkg update' updates the package lists. The lists contain information about the packages: name, file size, architecture, description etc., and also the SHA256sum. When you install a package opkg will compare the SHA256sums.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact