3 ms·
That's an extremely rare vector for exploitation. I can think of one specific case where a vendor completely forgot to check the result of a signature check, bu
by UnoriginalGuy 11y ago
That's an extremely rare vector for exploitation. I can think of one specific case where a vendor completely forgot to check the result of a signature check, but aside from that signature checking is well understood and rarely goes wrong.
But to be honest people are taking their specification and dooms-day-ism to stupid extremes. Soon we'll be talking about "it is only as secure as the CPU, what if you find a CPU bug and bypass all security?!"
- ZoFreX 11y ago> signature checking is well understood and rarely goes wrong I would argue otherwise, plenty of signature schemes give you enough rope to hang yourself. The Playstation 3 example springs to mind!
- pigeons 11y agoSignature verification for android applications has been a tough one: http://www.saurik.com/id/19 http://www.saurik.com/id/19