News for hackers. Stuff that matters.
Re:Downloading Software Safely Is Nearly Impossible by toomuchtodo on Monday March 03, 2014 @12:20PM (#7334935)
Signatures all the way down :( And reliable methods to verify those signatures without MITM attacks.
Re:Downloading Software Safely Is Nearly Impossible by pilom on Monday March 03, 2014 @12:54PM (#7335157)
Yay someone agrees TPM's can be a good thing!

Right?

Re:Downloading Software Safely Is Nearly Impossible by pjc50 on Monday March 03, 2014 @12:58PM (#7335182)
Some people do; mjg59 is working on boot attestation as an anti-boot-sector-virus mechanism. The underlying absolutely critical question is who controls the TPM hardware.
Re:Downloading Software Safely Is Nearly Impossible by pilom on Monday March 03, 2014 @01:12PM (#7335285)
I absolutely feel that way personally, I just get frustrated by the common response from people on HN etc. TPM's are the most secure / most mature way to verify your software integrity.