John: Hmm... settings.... manage software... AppX... delete.
popup:
Please insert the key required to remove the software
John: umm... what
key?
popup: I'm sorry, you're not authorised to adminster that app.
The
key required: the private key that the app was signed with.
Really...
it's not that default to implement that kind of "security" mechanism. One only
needs to have a set of "ethics" that puts increased income above individuals
rights/safety/etc.
UEFI is currently focused on boot. But boot altering
malicious software is not the whole of malicious software out there. I'd be
surprised if it was a significant percentage. And I'm not adding in the addware
type of malicious software, strictly viruses/worms/trojans/etc.
So...
this signing plan was brought in to tackle viruses that target the boot sector.
Do you really believe the signing won't extend to the other software on the
device? That it won't ever be used to block someone from removing
software?
Apple is already using the technique to prevent people from
installing the software on hardware of their choice. Is it really that hard to
imagine using it to block removal?
RAS[ Reply to This | Parent | # ]
|