Most software already has a “golden key” backdoor: the system update
From http://arstechnica.com/security/2016...d-auto-update/
Quote:
Software updates are just another term for cryptographic single-points-of-failure.
... here is a sad joke that happens to describe the reality we presently live in:
Q: What does almost every piece of software with an update mechanism, including every popular operating system, have in common?
A: Secure golden keys, cryptographic single-points-of-failure which can be used to enable total system compromise via targeted malicious software updates.
|
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
|
27th February 2016
Similar Threads
Linear Mode
