3 ms·
Those kinds of users are unlikely to replace the root of trust, simply due to the process being onerous. And even if everyone were to install malware. There ar
by the8472 5y ago
Those kinds of users are unlikely to replace the root of trust, simply due to the process being onerous.
And even if everyone were to install malware. There are other ways to secure banking. E.g. by providing an external token with a display. This is how hardware crypto wallets and some PIN generators for in-browser banking work. Or they could ask the owner to upload the attestation pubkey to their website, then the bank could still check if it's really their app that's running (as confirmed by the boot trust chain). I'm not sure how fingerprint scanners are tied into secure boot, maybe they could be used to verify user intent too.
- wizzwizz4 5y agoOkay, so the app's running. Except the app is remote-controlled by a malicious “display driver” that waits for the user to do all this authentication set-up, transfers the money away, “are you sure”s it, then prevents the user from seeing any of the on-phone scam warnings until it's too late to reverse the transaction.
- the8472 5y agoDisplay driver is part of the kernel, which is part of the trust chain.