This is how the Dell system detect utility worked. Back in the day I found out that they only checked if the referring domain ended with dell.com, so 'notdell.c

This is how the Dell system detect utility worked. Back in the day I found out that they only checked if the referring domain ended with dell.com, so 'notdell.com' passed their validation[1]. Instant easy unstoppable root RCE on a lot of dell machines from any website (it was a get request as well if I remember correctly). No built in auto update, no system tray icon, no idea if it's running. Good times. I found something similar with HP as well[2]. Since then I'm ok with not having this functionality used and abused too much. There is too much scope for things to go wrong, and badly so. 1. https://tomforb.es/dell-system-detect-rce-vulnerability https://tomforb.es/dell-system-detect-rce-vulnerability 2. https://tomforb.es/hp-support-solutions-framework-security-issue https://tomforb.es/hp-support-solutions-framework-security-i...