3 ms·
They could replace part of the password-checking software with a backdoored version that would send your password off to them. Your data is protected, but the O
by snazz 8y ago
They could replace part of the password-checking software with a backdoored version that would send your password off to them. Your data is protected, but the OS can still compromise it and a bad actor can replace parts of the OS (which is open source in both of your cases, making the process even easier).
- saagarjha 8y agoOn Chrome OS, this should cause the “your OS is unverified” warning to show up.
- snazz 8y agoDoes that mean that every OS file is signed and checksummed like on iOS (correct me if I’m wrong)?
- gruez 8y agoyes, something like this: https://source.android.com/security/verifiedboot/dm-verity https://source.android.com/security/verifiedboot/dm-verity
- sowbug 8y agohttps://www.chromium.org/chromium-os/chromiumos-design-docs/verified-boot https://www.chromium.org/chromium-os/chromiumos-design-docs/...
- saagarjha 8y agoYes, except you have the ability to replace it if you'd like.