Source: Hacker News
Article note: Oy. Local signing key available, system blindly accepts data after the carefully protected region, last-entry-takes-precedence design... so you can essentially just append a locally created fake license to any product.
Comments 