3 ms·
How would one know that this black box works the same for every user? What would stop Apple from distributing a compromised update to everyone or to selected us
by Fice 6y ago
How would one know that this black box works the same for every user? What would stop Apple from distributing a compromised update to everyone or to selected users?
- m3kw9 6y agoYep any protocol and any app can have this problem.
- dane-pgp 6y agoThe protection against this problem is to have the app (or the platform it's running on) check before installing an update that the hash of the binary it has downloaded has been recorded in a public transparency log. With closed source software, though, this doesn't give as much confidence, since a company could create a version which they send to everyone but which contains an "if (userId == NSA_TARGET)" conditional branch.