Register - Login
Views: 90628390
Main - Memberlist - Active users - Calendar - Wiki - IRC Chat - Online users
Ranks - Rules/FAQ - Stats - Latest Posts - Color Chart - Smilies
04-24-18 08:50:18 AM

Jul - Computers and Technology - ASUS LiveUpdate MitM exploit New poll - New thread - New reply
Next newer thread | Next older thread
StapleButter
Member
Level: 41


Posts: 273/485
EXP: 463689
For next: 16456

Since: 02-24-13

From: your dreams

Since last post: 49 days
Last activity: 15 hours

Posted on 06-05-16 11:51:29 AM Link | Quote
source


ASUS LiveUpdate is one of ASUS' preinstalled bloatware programs, that updates shit like BIOS, drivers etc...

The updates are retrieved over plain HTTP and not authenticated. There is a way, via MitM and some other trickery, to make it run a malicious executable with admin/system privileges.



Long story short, first thing to do when getting a new computer is axing all the preinstalled bloatware.
Next newer thread | Next older thread
Jul - Computers and Technology - ASUS LiveUpdate MitM exploit New poll - New thread - New reply




Rusted Logic

Acmlmboard - commit 5d36857 [2018-03-03]
©2000-2018 Acmlm, Xkeeper, Inuyasha, et al.

26 database queries.
Query execution time: 0.140792 seconds
Script execution time: 0.003445 seconds
Total render time: 0.144237 seconds
Memory used: 524288