[RexRollman]

I've been thinking about the possiblity of commercial software updates being used as an attack vector to overcome WDE. Could you imagine if the NSA went to Apple or Microsoft and said "push this compromising update to computers from this IP address/MAC address/serial number"?

[jacquesm]

That's quite possibly no longer a theoretical scenario at this point. It would really surprise me if you were the first person to think of that trick (it's pretty obvious) and that + gag orders would do nicely. Parallel construction to plug any holes in case someone wises up that this is already done in practice.

[RexRollman]

Parallel construction has to be one of the most unconstitutional things I have ever heard of. It's fraud and perjury.

[girvo]

But but but... they're criminals! The ends justify the means, right?

/s