Printable View
Microsoft (Windows Update) and Symantec (Virus definitions updates) provide services that allow their products on your computer to be automatically updated. Does anyone know of any way to exploit these services, and especially how to defend against these exploits? If there are already threads dealing with these issues please point me to them. Thanks.
Microsoft (Windows Update) and Symantec (Virus definitions updates) provide services that allow their products on your computer to be automatically updated. Does anyone know of any way to exploit these services, and especially how to defend against these exploits? If there are already threads dealing with these issues please point me to them. Thanks.
Well I suppose you could setup a fake update server, and use the hosts file to point that software to it, but if you can do that, why not just install a backdoor on the box instead of waiting for the guy to auto update his box? :)
Well I suppose you could setup a fake update server, and use the hosts file to point that software to it, but if you can do that, why not just install a backdoor on the box instead of waiting for the guy to auto update his box? :)
If you want to defend against these exploits don't use the auto-update feature or use those update services. It's that simple.
From my experience it seems to be that the more convenient you get the less secure you are.
I'm with KorpDeath on this. All the apps should be on manual updates.
yep, same here.
Yep. As said above, normally, the easier it is, the less secure it is. When I update my AV dat files, I go to the website and download the update file, then update.
hack this he he www.geocities.com/hacker_markou/night_vision