4 ms·
That this exploit can be used to spoof the Windows Update system is a big yikes. You can’t necessarily trust today’s update itself.
by heartbreak 7y ago
That this exploit can be used to spoof the Windows Update system is a big yikes. You can’t necessarily trust today’s update itself.
- munchbunny 7y agoThat depends on whether Windows Update is using ECC certificates. A quick scan of my Windows 10 trusted root certificate store shows almost exclusively RSA based certificates, so I’d guess 80% odds that Windows Update itself isn’t affected.
- shakna 7y agoIt may still be affected, the system may accept a bad ECC cert and override the RSA cert.
- GhettoMaestro 7y agoThis is pure speculation and garbage.