Reply to thread

Message

<blockquote data-quote="AtlBo" data-source="post: 760929" data-attributes="member: 32547">But how many systems are infected running with the TVL in place?&nbsp; Don&#039;t think it&#039;s very many.&nbsp; On the unreadable Chinese entries and weird obscure devs, OK, yes, the list could be stronger (shorter) or even much stronger.&nbsp; But, Comodo is after all in competition issuing digital signatures, so they want devs on their side.&nbsp; I can see how this turns someone against the list just by itself.&nbsp; Then I consider that some of those devs could be super important in Asia and also some of the obscure ones writing for some company or whatever.Not to defend it, because I did exactly as you for two years.&nbsp; However, I decided to trust Comodo&#039;s judgement and the list starting several months ago.&nbsp; I like it better now.&nbsp; The power of the TVL for me is that any dev on the list who betrays the &quot;trust&quot; placed in him would really be making a mistake.&nbsp; I started feeling like that would be the case.&nbsp; Also, Comodo does have the PUP detection option and I disable &quot;Trust files from trusted installers&quot;.&nbsp; Maybe this second setting is key for working with the current TVL.It will be a sad day for computing if devs are caught abusing the trust system.&nbsp; That said, it&#039;s probably only a matter of time.&nbsp; Also, hopefully stolen signatures can be eliminated entirely.&nbsp; This one is very important too...</blockquote>

[QUOTE="AtlBo, post: 760929, member: 32547"] But how many systems are infected running with the TVL in place? Don't think it's very many. On the unreadable Chinese entries and weird obscure devs, OK, yes, the list could be stronger (shorter) or even much stronger. But, Comodo is after all in competition issuing digital signatures, so they want devs on their side. I can see how this turns someone against the list just by itself. Then I consider that some of those devs could be super important in Asia and also some of the obscure ones writing for some company or whatever. Not to defend it, because I did exactly as you for two years. However, I decided to trust Comodo's judgement and the list starting several months ago. I like it better now. The power of the TVL for me is that any dev on the list who betrays the "trust" placed in him would really be making a mistake. I started feeling like that would be the case. Also, Comodo does have the PUP detection option and I disable "Trust files from trusted installers". Maybe this second setting is key for working with the current TVL. It will be a sad day for computing if devs are caught abusing the trust system. That said, it's probably only a matter of time. Also, hopefully stolen signatures can be eliminated entirely. This one is very important too... [/QUOTE]

Verification