3 ms·

But then who whitelist the whitelister? Solarwind was fun for that. They provide safe update of signed binaries . But their build system is corrupt, builds ta

But then who whitelist the whitelister? Solarwind was fun for that. They provide safe update of signed binaries . But their build system is corrupt, builds tampered stuffs and sign them. I’m a just a user of those things: it seams that cryptography is not what is breaking the chain of trust. It’s the usage? But go fix phishing. Maybe gov agencies should opt in for some tightly manage environments?

viraptor 5y ago
Windows application whitelisting in this context means your own list based on either paths or hashes of executables. https://www.bleepingcomputer.com/tutorials/create-an-application-whitelist-policy-in-windows/ https://www.bleepingcomputer.com/tutorials/create-an-applica... But you're right that it wouldn't help with the solarwind situation. Once installed and given privileges, a trusted app can do whatever it wants.