3 ms·
Security isn’t a binary ecosystem. There’s varying degrees of criteria. Performance, functionality, as well as acceptable level of risk.
by yardstick 4y ago
Security isn’t a binary ecosystem. There’s varying degrees of criteria. Performance, functionality, as well as acceptable level of risk.
- londons_explore 4y agoTrue, but this is "we put a big padlock picture so everyone thought it was secure" levels of security. That is just deceptive.
- sgammon 4y agoIsn’t this normally stored on an encrypted volume anyway? If the user cares about security even in the slightest, they’d be using FileVault, of course So really, this type of encryption is defeating scanning/probing, not a dedicated attacker who knows where to look and why. In such cases the attacker is worried about gaining access to the walled garden first — where the protections are.
- MichaelZuo 4y agoFiltering out amateurs seems to be a reasonable goal.
- alickz 4y agoI think this is more like putting a lock on your door. It won't deter a locksmith or a dedicated attacker, it just filters out the low effort attackers.
- grishka 4y agoPutting a lock on your door but also putting the key under your door mat.
- naniwaduni 4y agoYeah, that's a thing people do.
- leeter 4y agoI'd compare it to non-encrypted and signed pagestate in ASP.net or JSP, it works but it's completely untrustworthy. IMO this shouldn't be hard for apple to solve either, they can just create a key in keychain and use that to sign the file using the existing and standardized XML signing algorithm. That way any change to the file, even the XML will cause it to get discarded.
- trasz 4y agoNo, not really - fundamentally broken things like this one are worse than useless, because they degrade security by making it harder to understand the situation.