4 ms·
As a red teamer/pentester, this is an attacker's dream. This has to be a joke.
by ssklash 5y ago
As a red teamer/pentester, this is an attacker's dream. This has to be a joke.
- freeflight 5y agoAuto-updates are an attacker's dream too. Also, this disclaimer in the very first sentence of the article: > "Here's a fair warning: this article is reductio ad absurdum"
- LogonType10 5y ago> Auto-updates are an attacker's dream too. Why?
- freeflight 5y agoThe attacker only needs to compromise the update-infrastructure to be able push a malicious updates to everybody who runs the software [0] [1] [0] https://blog.malwarebytes.com/android/2021/04/pre-installed-auto-installer-threat-found-on-android-mobile-devices-in-germany/ https://blog.malwarebytes.com/android/2021/04/pre-installed-... [1] https://www.businessinsider.com/asus-acknowledges-computers-infected-by-auto-update-virus-2019-3 https://www.businessinsider.com/asus-acknowledges-computers-...
- hdjjhhvvhga 5y agoIn general, of course. However, the article describes the ridiculousness of today's update mania. And there are actually systems that I don't update very often (my OpenBSD-based firewall) without losing any sleep over it. Unfortunately, such systems are very few in the real world.
- catlikesshrimp 5y agoYes, totally the reason why healthcare is more vulnerable to ransomware.