Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Because they don't want trojans to hijack the browser. If the user can change the signing preference, any application can.


It is not possible for a user land application to prevent root processes from hijacking / modifying it. Such protection requires the protecting mechanism to run at a higher level of trust / security ring than the attacker.


Yes, the sibling comment and thread already brought that up.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: