Livecd-creator is one more example of program which happily installs
whatever downloads from the network, without any verification
(repository metadata consistency doesn't count)...
Patches sent upstream here:
https://github.com/rhinstaller/livecd-tools/pull/14
