-
March 11th, 2002, 12:04 AM
#1
Update Exploits
Microsoft (Windows Update) and Symantec (Virus definitions updates) provide services that allow their products on your computer to be automatically updated. Does anyone know of any way to exploit these services, and especially how to defend against these exploits? If there are already threads dealing with these issues please point me to them. Thanks.
For the wages of sin is death, but the free gift of God is eternal life in Christ Jesus our Lord.
(Romans 6:23, WEB)
-
March 11th, 2002, 12:04 AM
#2
Update Exploits
Microsoft (Windows Update) and Symantec (Virus definitions updates) provide services that allow their products on your computer to be automatically updated. Does anyone know of any way to exploit these services, and especially how to defend against these exploits? If there are already threads dealing with these issues please point me to them. Thanks.
For the wages of sin is death, but the free gift of God is eternal life in Christ Jesus our Lord.
(Romans 6:23, WEB)
-
March 11th, 2002, 01:02 AM
#3
Member
Well I suppose you could setup a fake update server, and use the hosts file to point that software to it, but if you can do that, why not just install a backdoor on the box instead of waiting for the guy to auto update his box?
-
March 11th, 2002, 01:02 AM
#4
Member
Well I suppose you could setup a fake update server, and use the hosts file to point that software to it, but if you can do that, why not just install a backdoor on the box instead of waiting for the guy to auto update his box?
-
March 11th, 2002, 03:59 AM
#5
If you want to defend against these exploits don't use the auto-update feature or use those update services. It's that simple.
From my experience it seems to be that the more convenient you get the less secure you are.
Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
- Samuel Johnson
-
March 11th, 2002, 03:32 PM
#6
I'm with KorpDeath on this. All the apps should be on manual updates.
Trappedagainbyperfectlogic.
-
March 11th, 2002, 03:44 PM
#7
Member
LATER-
__________________________
Computers make sense people
DON\'T.
-
March 11th, 2002, 03:55 PM
#8
Yep. As said above, normally, the easier it is, the less secure it is. When I update my AV dat files, I go to the website and download the update file, then update.
[shadow]uraloony, Founder of Loony Services[/shadow]
Visit us at
[gloworange]http://www.loonyservices.com/[/gloworange]
-
March 11th, 2002, 04:11 PM
#9
Banned
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|