3 ms·

They can just revoke the signature, right?

• __s 6y ago
  Only if network access can access revocation
• SilverRed 6y ago
  They can't revoke the math that makes the signature valid. As long as the card is unable to get a network connection to work out the driver is revoked, there is no going back on this.
• dheera 6y ago
  Even if they do some CA-side revoking crap you could just have your system not check, or revert to a previous state in which the signature was not revoked.
  • astrange 6y ago
    They can adopt online signatures, it's not hard to prevent rolling back an install like that. But you now need an internet connection at update time.
    • dheera 6y ago
      I can always restore my hard disk to an earlier image, or reinstall the driver from offline sources and lock down updates with apt-get hold
      • astrange 6y ago
        You can't do that to an iPhone (or a Mac with full boot security enabled) and they could do the same thing if they wanted.
        • dheera 6y ago
          Well, that's why I don't use iPhones or Macs then.
          • astrange 6y ago
            You could just turn off full boot security, but it makes you susceptible to downgrade attacks.