So, the “driver” here is just a downloader/auto-updater to fetch the actual drivers based on usb id... definitely a letdown, I thought there would be a substant

So, the “driver” here is just a downloader/auto-updater to fetch the actual drivers based on usb id... definitely a letdown, I thought there would be a substantial issue here. I feel like infosec Twitter hasn’t heard of Hanlon’s razor, or maybe they just like being mad all the time over nothing. This thread unravels into mundanity as the author’s network traffic observations reveal the only actual issue is that drivers are downloaded over cleartext.