4 ms·

Even if they do some CA-side revoking crap you could just have your system not check, or revert to a previous state in which the signature was not revoked.

• astrange 6y ago
  They can adopt online signatures, it's not hard to prevent rolling back an install like that. But you now need an internet connection at update time.
  • dheera 6y ago
    I can always restore my hard disk to an earlier image, or reinstall the driver from offline sources and lock down updates with apt-get hold
    • astrange 6y ago
      You can't do that to an iPhone (or a Mac with full boot security enabled) and they could do the same thing if they wanted.
      • dheera 6y ago
        Well, that's why I don't use iPhones or Macs then.
        • astrange 6y ago
          You could just turn off full boot security, but it makes you susceptible to downgrade attacks.