Comment by tonyhart7
10 hours ago
"let the user install their own certs should not exist"
are you sure that this is not opening to more attack vector ?????
10 hours ago
"let the user install their own certs should not exist"
are you sure that this is not opening to more attack vector ?????
Yes. We're giving the user the ability to protect themselves from the vendor.
Your logic only makes sense if the user is your enemy.
I am the vendor and the user is my enemy. Fortunately I get to decide his capabilities and not the other way around, so I win.
The device is in the user's possession, so you'll lose eventually, it's just a matter of how long it takes.
Oops, claude just cracked your system!
You can even install your own certs into the golden cage (also known as iPhones).
Users aren't supposed to be considered an attack vector. I don't care what the advertisers think.
The infected devices on the LAN are an attack vector, though.
If I want my IOT garbage to be infected that's between me and my local botherder.
The vendor loses the right to decide how my things are used the minute they take my money.
2 replies →
Users are attack vectors in one of the more commonly successful attacks: social engineering.
Like: To verify you are human, clik on the two ducks and install this new certificate.
Bonus points if it's during a fake job interview.
4 replies →
Yes, however, this causes people who know what they do suffer because of people who don't. My question is whether this affects innovation, because the same thing at different places definitely does, and we actively fight against this exactly to help innovation.
Right. Let's no longer sell computers then.
Which is better - two attack vectors that can be mitigated by an expert, or one attack vector that can't be mitigated by anyone?