3 ms·
Articles like this are some of the funniest posts on Old New Thing, eg [1]. There's no alternative to trusting everyone you allowed to install software on your
by x0x0 11y ago
Articles like this are some of the funniest posts on Old New Thing, eg [1]. There's no alternative to trusting everyone you allowed to install software on your machine or who has admin/root access.
[1] http://blogs.msdn.com/b/oldnewthing/archive/2014/07/03/10539205.aspx http://blogs.msdn.com/b/oldnewthing/archive/2014/07/03/10539...
- pdkl95 11y agoYou seriously don't see any difference between 1) Dell installing a cert that applies broadly with plausible deniability (the current situation), and 2) Dell installing a similar cert and explicitly overriding some sort of per-domain debug setting? Yes, Dell could do anything they want, but the latter situation clearly establishes mens rea[1]. https://en.wikipedia.org/wiki/Mens_rea https://en.wikipedia.org/wiki/Mens_rea
- shkkmo 11y agoThe article addresses this explicitly. The point is to reduce the attack surface and limit the damage that is caused by these sorts of 'mistakes'.