5 ms·
from a security standpoint, this is terrifying. one infected application over FUSE could potentially compromise thousands of users.
by anonbanker 11y ago
from a security standpoint, this is terrifying. one infected application over FUSE could potentially compromise thousands of users.
- rkeene2 11y agoIt's the same as any other package repository being compromised. There's currently no key revokation, like most package systems but being based on X.509 it certainly supports it. Additionally the only part of AppFS that runs as a privileged user is the daemon itself, unlike most package systems where there is an install step that can run arbitrary scripts as a privileged user.
- anonbanker 11y agoSadly, X.509 has been rendered useless due to certificate authority compromises, and the need to trust keys from those CA's. if something else was chosen, it might be far less terrifying.
- rkeene2 11y agoWhat ? The CA AppFS trusts has never been compromised and you are free to replace it. It sounds like you think SSL/TLS is being used or something or that many certificate authorities are trusted.