3 ms·
> Serve malicious updates from a locally controlled machine. Lord knows about auth. Wouldn't they have to break into my local machine first, plant an update se
by wolverine876 3y ago
> Serve malicious updates from a locally controlled machine. Lord knows about auth.
Wouldn't they have to break into my local machine first, plant an update service, and an update? That doesn't seem to scale well at all, and wouldn't it be easier to just break into the machine they want to 'update'?
- timschmidt 3y agoA fairly prominent update service already runs from the domain microsoft.com Many machines come with it preinstalled.
- wolverine876 3y agoThe erroneous DNS change wouldn't help that sort of exploit. It just redirects attempts to contact microsoft.com to a local address, probably a router.
- timschmidt 3y agoThat's exactly what I said in the first post.