4 ms·
I do wonder how Microsoft verifies 3rd party drivers before pushing them through Windows Update. I've seen some very low quality drivers (and associated bloat o
by r1ch 6y ago
I do wonder how Microsoft verifies 3rd party drivers before pushing them through Windows Update. I've seen some very low quality drivers (and associated bloat of services and background exes) be pushed through, to the point where I disabled driver updates and went back to doing it manually. A supply chain attack here could be devastating.
- AniseAbyss 6y agoIf its the official driver from the hardware manufacturer they'll "verify" it. I don't really blame MS people just want to plug in and play.
- choeger 6y agoAbsolutely, that could get very expensive for MS if someone does something really nasty and people start sueing MS for distributing malware. Come to think of it, they are probably also partially liable through the GDPR alone...
- matheusmoreira 6y agoLow quality drivers? At least two drivers released by games companies had privilege escalation as a feature: https://securelist.com/elevation-of-privileges-in-namco-driver/83707/ https://securelist.com/elevation-of-privileges-in-namco-driv... https://twitter.com/thewack0lian/status/779397840762245124 https://twitter.com/thewack0lian/status/779397840762245124 https://old.reddit.com/r/Games/comments/545cjy/sfvs_new_pc_update_is_accessing_kernel_level_in/ https://old.reddit.com/r/Games/comments/545cjy/sfvs_new_pc_u... https://github.com/tandasat/ExploitCapcom https://github.com/tandasat/ExploitCapcom I don't think I trust proprietary drivers anymore. Especially if they come from the gaming industry.