Re: An attack on paypal --> secure UI for browsers

Adam Lydick wrote:

The faq (see attached) claims that "anyone can write a nexus" and that "users control which nexus(s) run".

I certainly didn't see anything that suggests that anyone can force you to run arbitrary code, regardless of who has signed it.

"Force", maybe not. No one can "force" me to turn my machine on, for instance. But take a look at one line you quoted from the FAQ: "Only one nexus at a time will be able to run on a machine." That looks to me like an important sentence.