Register - Login
Views: 92089153
Main - Memberlist - Active users - Calendar - Wiki - IRC Chat - Online users
Ranks - Rules/FAQ - Stats - Latest Posts - Color Chart - Smilies
06-21-18 11:48:13 PM

Jul - Computers and Technology - ASUS LiveUpdate MitM exploit New poll - New thread - New reply
Next newer thread | Next older thread
StapleButter
Member
Level: 41


Posts: 273/487
EXP: 473761
For next: 6384

Since: 02-24-13

From: your dreams

Since last post: 1 day
Last activity: 1 day

Posted on 06-05-16 11:51:29 AM Link | Quote
source


ASUS LiveUpdate is one of ASUS' preinstalled bloatware programs, that updates shit like BIOS, drivers etc...

The updates are retrieved over plain HTTP and not authenticated. There is a way, via MitM and some other trickery, to make it run a malicious executable with admin/system privileges.



Long story short, first thing to do when getting a new computer is axing all the preinstalled bloatware.
Next newer thread | Next older thread
Jul - Computers and Technology - ASUS LiveUpdate MitM exploit New poll - New thread - New reply




Rusted Logic

Acmlmboard - commit 5d36857 [2018-03-03]
©2000-2018 Acmlm, Xkeeper, Inuyasha, et al.

26 database queries.
Query execution time: 0.142046 seconds
Script execution time: 0.003228 seconds
Total render time: 0.145274 seconds
Memory used: 524288