3 ms·
A favorite attack vector is various auto-updating software on your computer that downloads updates or update metadata over HTTP. For the longest time Sparkle (a
by stefan_ 7y ago
A favorite attack vector is various auto-updating software on your computer that downloads updates or update metadata over HTTP. For the longest time Sparkle (an update framework used in Mac apps such as VLC, iTerm, ..) defaulted to HTTP.
Once an attacker is in your network, it's more or less trivial to make that software connect to a malicious update server.
- Kalium 7y agoThere's a limited amount of room to exploit this, this so long as signing is handled correctly. The Debian Apt system worked this way for a long time. Of course, a lot of code signing systems are mismanaged, so...