3 ms·
apparently the issue is that you could modify the script, keeping the script-launching binary unchanged and signed? did not try/verify though
by seb314 7y ago
apparently the issue is that you could modify the script, keeping the script-launching binary unchanged and signed?
did not try/verify though
- UncleMeat 7y agoHow are you planning on modifying the script? The network can't do it if it is downloaded over TLS. A malicious host can already ship evil scripts. Malware on the local machine can already do worse that edit a script.
- lordlimecat 7y agoThe installer is code-signed, and requests root privileges, right? >Malware on the local machine can already do worse that edit a script. Malware on the local machine may not have root rights. You're basically arguing that privilege escalation isnt a real threat.