Spankey said:
fordy said:
Spankey said:
but you see, he cited one which can be attached to homebrew apps which are not developed, suported or distributed by Sony.
Putting a DKNY badge on a wallet does not make it automatically a wallet made by DKNY if you see what I'm getting at.
|
Except the only boundaries are whether the PS3 accepts it or not. Code signing is a simple mathematical equation if you CITE the number. Besdes your argument is flawed because Sony use the same key for everything, whereas ISBNs and UPCs require one code per product.
And for the record, there is talk about replacing the ISBNs with GUIDs, effectively dissolving the foundation to no more than just a checker for doubleups, so your argument doesn't hold up there, either.
|
you still don't get my point.
so what if Sony uses the same key to sign every piece of software they autherise?
The point is that GeoHot is not Sony and should have no right to sign something as coming from Sony when he is not Sony. he's flogging fake Sony goods to the PS3 and has told others how to do the same.
GUID is just another number generated and distributed by a protected system. Just like ISBN. There is or will be a controlling body who will assign the numbers. The same will hold true, you won't be allowed to generate a number privately and then claim it came from them, so i don't see how that's too different at all.
|
Okay, let's assume your vague assumption has any chance of standing in court. In that case:
1. there would have to be a governing body who monitors security keys by corporations. Not only is it not in the corporations interest to be giving them out, it's not the government's interest to be providing backup for stolen keys from corporations.
2. Sony would have had to have registered their key with that body.
3. No two companies would be allowed to have the same key.
4. The code signing system would only be allowed to accept numbers registered with this governing body.
The similarity is way too vague for any enforcement, and the idea of enforcement requires ludicrous rues to be put in place.
Sony cannot just declare by themselves "this is our number, and anything published with it shall be ours" to thin air and expect it to hold up in court. Get real.
And yes, GUIDs can be generated from any point using a corporate IP address. The governing body no longer would need to "issue" them.