2 ms·

PATH can get emptied and the directory of its own executable is retrieved before a secured app shells out to another app. I think it’s great that you think it

PATH can get emptied and the directory of its own executable is retrieved before a secured app shells out to another app. I think it’s great that you think it is “trusted”, but I prefer the “trust but verify” approach. That’s why using a separate hardware flash chip, that cannot be controlled by CPU instruction due to a hardware switch, has become that last bastion of security nowadays. It is just that it becomes an inconvenience for ease of use in these days and ages. Trade offs.

ElectricalUnion 4y ago
> I think it’s great that you think it is “trusted”, but I prefer the “trust but verify” approach. I don't trust "Trusted computing" at all. It is, by it's own definition, rotten to the core. > The core idea of trusted computing is to give _hardware manufacturers_ control over what software does and does not run on a system by refusing to run unsigned software. "hardware manufacturers" in this case meaning, of course, Intel, not whoever is using their product to build actually productive things.