5 ms·
I covered that in the portion of the comment where I mentioned http/tcp
by someguydave 7y ago
I covered that in the portion of the comment where I mentioned http/tcp
- labawi 7y agoI would really love some data (or good reasoning) on how server attacks are overwhelmingly more likely, so much so that the false security impression increases risk. MITM executable patching attacks are not theoretical. AFAIU, the first hit on "mitm executable infection" [1] and an interceptor (ARP/wifi/whatever) is all a script kiddie needs. [1] https://n0where.net/mitm-pe-file-infector-peinjector https://n0where.net/mitm-pe-file-infector-peinjector
- someguydave 7y agoTo me, the fact that the server being exploited to deliver bad binaries is a possibility is reason enough to be cautious, and to therefore not regard them with any more credibility than if they were delivered over unencrypted http.