An attack on paypal --> secure UI for browsers

[David Wagner]

Adam Lydick  wrote:
>The faq (see attached) claims that "anyone can write a nexus" and that
>"users control which nexus(s) run".
>
>I certainly didn't see anything that suggests that anyone can force you
>to run arbitrary code, regardless of who has signed it.

"Force", maybe not.  No one can "force" me to turn my machine on,
for instance.  But take a look at one line you quoted from the FAQ:

    "Only one nexus at a time will be able to run on a machine."

That looks to me like an important sentence.