3 ms·
> The first one gives us our answer: the URL is stored in the registry. It’s actually written by the InstallShield setup. I... I mean, I get why they did this,
by mschuster91 2y ago
> The first one gives us our answer: the URL is stored in the registry. It’s actually written by the InstallShield setup.
I... I mean, I get why they did this, rather than building a proper userspace application... but who the fuck thought this would be something that's acceptable to ship to consumers? And what happens in case there are multiple different disk models installed in the same system?
- echoangle 2y agoIf I understand it correctly, the URL lets you download a file that maps every Toshiba disk model to a firmware version (???). So having different disk models doesn’t change anything, the program just gets the file, checks which drive needs which version, and then downloads these firmware binaries and installs them.
- philjohn 2y agoOr someone social engineers you into clicking on a .reg file which changes these URL's to something malicious that will brick your drives.
- HHad3 2y agoThey might just as well send any other .reg file that runs a program (e.g. by creating an autoboot entry, COM server, service, ...) that bricks devices.