3 ms·

Since when can CAs determine bad intent? Besides, there are enough legitimate uses for webcam viewing software that you could just take a regular signed progra

• krichman 14y ago
  They cannot, but they can revoke certificates from malware developers after the fact. And requiring a developer program would vastly reduce the number teenagers tricking people into installing a thing. Allowing self-signed roots would let more technical users manage their own security and install their own apps. A solution to configuration files is to include them in what is signed or not allow your software to have the webcam on without also showing a window explaining what is happening and a button to turn it off. Modern web browsers typically ask for permission to use the webcam beforehand, and you can always close that page. I guess there would still be shenanigans with signed binaries but there would be far fewer than what is going on here.