Kuribo64
Views: 8,544,082 Home | Forums | Uploader | Wiki | Object databases | IRC
Rules/FAQ | Memberlist | Calendar | Stats | Online users | Last posts | Search
06-25-18 03:23 PM
Guest:

0 users reading ASUS LiveUpdate MitM exploit | 1 bot

Main - Computers and technology - ASUS LiveUpdate MitM exploit New reply


StapleButter
Posted on 06-05-16 11:50 AM Link | #71499
source


ASUS LiveUpdate is one of ASUS' preinstalled bloatware programs, that updates shit like BIOS, drivers etc...

The updates are retrieved over plain HTTP and not authenticated. There is a way, via MitM and some other trickery, to make it run a malicious executable with admin/system privileges.



Long story short, first thing to do when getting a new computer is axing all the preinstalled bloatware.

____________________
NSMBHD - Kafuka - Jul

what do you use to measure bolts? a boltmeter

Yami
Posted on 06-05-16 03:31 PM Link | #71505
Which is why I always either get a Mac or Surface, because the only Bloatware these Computers have, are iLife and Office 365 respectively.
Either that, or I just Install Linux off the bat.

It's nothing different with Android Phones and Tablets, where only Nexus Phones/Tablets don't get any Bloatware.
But I don't care about Android, anyway.


Main - Computers and technology - ASUS LiveUpdate MitM exploit New reply

Page rendered in 0.017 seconds. (2048KB of memory used)
MySQL - queries: 26, rows: 191/191, time: 0.013 seconds.
[powered by Acmlm] Acmlmboard 2.064 (2017-11-20)
© 2005-2008 Acmlm, Xkeeper, blackhole89 et al.