3 ms·
We can't even be sure what they're really doing because we cannot audit the software nor can we audit the encrypted communications.
by static_noise 11y ago
We can't even be sure what they're really doing because we cannot audit the software nor can we audit the encrypted communications.
- moloch 11y agoIt's not difficult to intercept this type of encrypted communication, since it's coming from your computer you can just hook the functions responsible for sending the data, or for encrypting it in the first place. Many times it's as simple as adding your own CA to the trusted certificate store.
- static_noise 11y agoInteresting idea! Did someone actually do such a thing for the older versions of Windows? Was it possible to meaningfully decode all of the outgoing data?
- pdkl95 11y agoThat works now, but one the Intel SGX instructions are commonplace it is going to be next to impossible to modify "secured" code or read their RAM.
- mtgx 11y agoThey announced some cool security technologies for Windows 10, but in my eyes their recent privacy invasions not only cancel all that out (I actually believe some of them are to make NSA/FBI's jobs easier, even as they "strengthen" the security of the OS), but makes everything worse in the end.