4 ms·
>Malware writers will just get free ids and sign their malware. Or, the signing key will be stolen, like it always is. I'd wager that blackhats around the wor
by JonnieCache 15y ago
>Malware writers will just get free ids and sign their malware.
Or, the signing key will be stolen, like it always is.
I'd wager that blackhats around the world are currently tendering to cartels for this contract as we speak.
- shadowfiend 15y agoNeither of these will work, because (a) the signing key is per-developer and (b) the entire point is that when your malware is found to be signed with key X, key X is revoked and your software no longer runs. That's the purpose of the system...
- rmc 15y agoSo the signing key for $COMPANY will now be worth money for extorsion.
- shadowfiend 15y agoAnd is, again, instantly revokable. It'll be annoying if it's stolen, but you just revoke it, give the company the new one, and update the app in the app store (or your download, if you're not in the store). This is arguably far better than being unknowingly hit by malware.
- mike-cardwell 15y agoHe's referring to the master key, which will be used to sign the per developer signing keys. If that is stolen, then it will be possible to sign arbitrary signing keys and issue arbitrary revocation certificates.
- JonnieCache 15y ago>He's referring to the master key Yeah, that.
- deleted 15y ago[deleted]