Register - Login
Views: 95149847
Main - Memberlist - Active users - Calendar - Wiki - IRC Chat - Online users
Ranks - Rules/FAQ - Stats - Latest Posts - Color Chart - Smilies
09-19-18 03:17:07 PM

Jul - Computers and Technology - ASUS LiveUpdate MitM exploit New poll - New thread - New reply
Next newer thread | Next older thread
StapleButter
Member
Level: 42


Posts: 273/490
EXP: 489050
For next: 32312

Since: 02-24-13

From: your dreams

Since last post: 12 days
Last activity: 6 hours

Posted on 06-05-16 11:51:29 AM Link | Quote
source


ASUS LiveUpdate is one of ASUS' preinstalled bloatware programs, that updates shit like BIOS, drivers etc...

The updates are retrieved over plain HTTP and not authenticated. There is a way, via MitM and some other trickery, to make it run a malicious executable with admin/system privileges.



Long story short, first thing to do when getting a new computer is axing all the preinstalled bloatware.
Next newer thread | Next older thread
Jul - Computers and Technology - ASUS LiveUpdate MitM exploit New poll - New thread - New reply




Rusted Logic

Acmlmboard - commit 5d36857 [2018-03-03]
©2000-2018 Acmlm, Xkeeper, Inuyasha, et al.

26 database queries.
Query execution time: 0.180303 seconds
Script execution time: 0.003376 seconds
Total render time: 0.183679 seconds
Memory used: 524288