Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Wiki Markup
Signing code, however, has its own problems. According to Schneier \[[Schneier 2000|AA. Bibliography#SchneierReferences#Schneier 00]\]

First, users have no idea how to decide if a particular signer is trusted or not. Second, just because a component is signed doesn't mean that it is safe. Third, just because two components are individually signed does not mean that using them together is safe; lots of accidental harmful interactions can be exploited. Fourth, "safe" is not an all-or-nothing thing; there are degrees of safety. And fifth, the fact that the evidence of attack (the signature on the code) is stored on the computer under attack is mostly useless: The attacker could delete or modify the signature during the attack, or simply reformat the drive where the signature is stored.

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="4cf3017d583902c0-cfdcd1ec-4d9a47b2-ac5db6b1-db7e36abd227001f3815def5"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

Adherence to least privilege [XYN]

]]></ac:plain-text-body></ac:structured-macro>

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="546365edf94e90d7-7843d36d-4f27469c-9528809d-cb48deecb81e5dbca9b8620d"><ac:plain-text-body><![CDATA[

[[Dormann 2008

AA. Bibliography#Dormann References#Dormann 08]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="c45e1085565e0bcd-aa896da5-4e2b474f-af20a94f-3a24d798229a3104d36b555c"><ac:plain-text-body><![CDATA[

[[McGraw 1999

AA. Bibliography#McGraw References#McGraw 99]]

Appendix C, Sign Only Privileged Code

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b5618b63f7100fcc-145c9b68-45674a11-a219bd76-70236209f6dec7018c654503"><ac:plain-text-body><![CDATA[

[[Schneier 2000

AA. Bibliography#Schneier References#Schneier 00]]

 

]]></ac:plain-text-body></ac:structured-macro>

...