> May we assume that this kind of pop-up cannot be imitated by a > hacker that wants us to type our passphrase in his box? Of course not. If your box gets pwned, the person who pwns it can do whatever they want to it. If your box is compromised, you're in a game over state.