Reply to thread

Message

<blockquote data-quote="AtlBo" data-source="post: 761000" data-attributes="member: 32547">This is a good point.&nbsp; A signature is basically meaningless unless it is registered with one of the large signature providers.&nbsp; That costs money and puts malcoders at risk.&nbsp; If they abuse the system directly, the system will look for its vengeance any way possible.&nbsp; Anyone who writes a program can sign it.&nbsp; That signature or any other there is worthless.&nbsp; As [USER=7463]@cruelsister[/USER] says, the digital signature end of security is in good hands.&nbsp; I agree with this, in spite of the stolen credentials fiasco.&nbsp; Makes one wonder sometimes about what could get inside of software company and pass on information like this...not that anyone did with CCleaner.&nbsp; I think irregardless it would show up at some point.The extension things is sending chills up my spine.&nbsp; I hadn&#039;t thought about it from that angle.&nbsp; I know some of the extension devs don&#039;t really earn so much money, so a fair price for their extension might be irresistable.&nbsp; And I guess there isn&#039;t anyone to notice even that the exchange has occurred.&nbsp; I wonder if maybe Google could go to registering versions and allow updates only on a timed basis...or something like this...</blockquote>

[QUOTE="AtlBo, post: 761000, member: 32547"] This is a good point. A signature is basically meaningless unless it is registered with one of the large signature providers. That costs money and puts malcoders at risk. If they abuse the system directly, the system will look for its vengeance any way possible. Anyone who writes a program can sign it. That signature or any other there is worthless. As [USER=7463]@cruelsister[/USER] says, the digital signature end of security is in good hands. I agree with this, in spite of the stolen credentials fiasco. Makes one wonder sometimes about what could get inside of software company and pass on information like this...not that anyone did with CCleaner. I think irregardless it would show up at some point. The extension things is sending chills up my spine. I hadn't thought about it from that angle. I know some of the extension devs don't really earn so much money, so a fair price for their extension might be irresistable. And I guess there isn't anyone to notice even that the exchange has occurred. I wonder if maybe Google could go to registering versions and allow updates only on a timed basis...or something like this... [/QUOTE]

Verification