2 ms·

Screen shot of EncroChat message claiming authorities seized their domain names and compromised their "carbon" units with malware. https://twitter.com/Borisuit

• Nextgrid 6y ago
  Seems like they didn't sign software updates with an offline key and relied on the transport (TLS via the domain) to authenticate them. If they used an offline key (GPG?) to sign updates, a compromised transport wouldn't have allowed an attacker to deploy malicious updates to the devices. That's exactly how most Linux distributions operate, the mirrors themselves are untrusted and packages are often fetched via unencrypted HTTP, but that doesn't matter because the signatures are checked independently of the transport.