Register - Login
Views: 87315250
Main - Memberlist - Active users - Calendar - Wiki - IRC Chat - Online users
Ranks - Rules/FAQ - JCS - Stats - Latest Posts - Color Chart - Smilies
11-17-17 08:50:40 PM

Jul - Computers - ASUS LiveUpdate MitM exploit New poll - New thread - New reply
Next newer thread | Next older thread
StapleButter
Member
Level: 40


Posts: 273/461
EXP: 411359
For next: 29950

Since: 02-24-13
From: your dreams

Since last post: 28 days
Last activity: 4 days

Posted on 06-05-16 11:51:29 AM Link | Quote
source


ASUS LiveUpdate is one of ASUS' preinstalled bloatware programs, that updates shit like BIOS, drivers etc...

The updates are retrieved over plain HTTP and not authenticated. There is a way, via MitM and some other trickery, to make it run a malicious executable with admin/system privileges.



Long story short, first thing to do when getting a new computer is axing all the preinstalled bloatware.
Next newer thread | Next older thread
Jul - Computers - ASUS LiveUpdate MitM exploit New poll - New thread - New reply




Rusted Logic

Acmlmboard - commit 2f1bc75 [2017-08-27]
©2000-2017 Acmlm, Xkeeper, Inuyasha, et al.

26 database queries.
Query execution time: 0.171523 seconds
Script execution time: 0.002891 seconds
Total render time: 0.174414 seconds