Feeds

Trust me, I'm a developer

Code signing product suite

Choosing a cloud hosting partner with confidence

Web services may be a clever way of conducting business with or delivering services to customers, but it also constitutes a helluva risk – after all, users get involved in downloading code from hither and yon, and are probably far too busy with their own work to ponder too deeply on whether that downloaded code is as wholesome as they assume it to be.

The same goes for mobile phone users. It is now only grumpy old curmudgeons who treat them as…… well……. telephones. For a growing army of users they are the delivery point for a whole range of new services that involve them in downloading code.

So here are two scenarios in which users are left wide open to code of any degree of malice. What can help here is a way of identifying the authorship of code and verifying its integrity as being the same as when it left the software vendor. That is the market GeoTrust is pitching at with a new Code Signing Product Suite. According to the company’s European marketing director, Steve Waite, the objective is to provide end users with security on the authorship and traceability of code by providing software vendors with a means of digitally signing their work prior to its use on public and private networks.

Software authors can sign up for the service by applying to GeoTrust, which checks that they are a genuine business. It then issues them with code-signing credentials which are embedded into Windows, Windows Mobile or Java software. This allows developers to then add a digital signature to the code. If the code is corrupted or tampered with in any way the signature fails and a warning pop-up appears automatically. Alternatively, the code can be stopped from running at all.

For mobile software it offers signing options for both privileged and unprivileged code for Windows Mobile. The latter are applications that do not affect the core operating system, such ringtones. The former category does affect the core. Here, developers need to register both with Microsoft and GeoTrust to sign up for the scheme. The cost is $159 per certificate per year for computer code, with developers then allowed as many signing as they like. For the mobile market, the cost is $295 for 10 signings, with a signing equalling a product release or a product upgrade. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
ONE MILLION people already running Windows 10
A third of them are doing it in VMs, but early feedback focuses on frippery
Netscape Navigator - the browser that started it all - turns 20
It was 20 years ago today, Marc Andreeesen taught the band to play
Sway: Microsoft's new Office app doesn't have an Undo function
Content aggregation, meet the workplace ... oh
Sign off my IT project or I’ll PHONE your MUM
Honestly, it’s a piece of piss
Do Moan! MONSTER 6-day EMAIL OUTAGE hits Domain Monster
Customers freaked out by frightful service
Return of the Jedi – Apache reclaims web server crown
.london, .hamburg and .公司 - that's .com in Chinese - storm the web server charts
NetWare sales revive in China thanks to that man Snowden
If it ain't Microsoft, it's in fashion behind the Great Firewall
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.