Hacker Claiming He Can Exploit Windows Update

Page 3 - Seeking answers? Join the Tom's Hardware community: where nearly two million members share solutions and discuss the latest tech.
Status
Not open for further replies.
Just another IT 9/11 kid working for the Government wanting to spread the famous words of FDR, "there is nothing to fear, but fear itself" -So let US protect you from yourselves so you can play duck n cover, get cavity checks at the airport & a pack of condoms to go with that tin foil around your head! ;-)
 
If you read carefully, I said extend my social life... I go out, take picture and post it in facebook for my parents and friends to see and like wise with them. antiV have extended their capability, they can alert you of the site before you go there. But of course, you have to allow it to install a plugins for it to work. But of course to be responsible, I would need to caution people that having a antiV would NOT mean your secured. You are just MORE secured but NOT totally. And this my friend is what's different between you and me.

I have been using kaspersky for 6 years, like someone here says, its not Norton...
 
reminds me of a IT manager who literally do not want an entire network of PC updated... he also think it just slows them down and crash them...

He ended up as a laughing stock of the entire IT section for a decade... poor guy
He also does not want to sub-net his network and ended up with 1300+ pc in a single network... tsk tsk tsk
 
i should also point out, that i never update windows, im on xp. i think last time i tried, i got stuck in a update loop, where the same updates try to get installed over and over again, taking 1-2gb with them each time, and i cant figure out where that space is going...

i'm a firm believer in if it isn't broke, don't fix it.
 
Okay I'll bite. Personally I use Microsoft's Security Essentials on my PC as well as update it. I do remember one time when an update completely screwed up the Windows Update service and it wasn't fixed for months (anybody else remember the time Microsoft updated the Update installer in XP and it was utilizing 100% of the CPU just to check for updates). However I've never had an AV that screwed up a computer, maybe slow it down some but it wasn't fast in the first place (I've tried out Avast, Comcast provided Norton, and now Comcast provided McAfee). I need to use AV because my router is shared between the entire family and I have no clue what the other members download on a daily basis, for me it's just a small peace of mind, until Comcast sent a Webguard alert saying one of the PCs is spewing malware...... yay.
 
dioxholster "freedom isnt worth this annoyance"

I'vve read,heard,watched movies about MILLIONS that have died and disagree wtih you! you *#*#tool!
 
Hey, just a thought here. The people who get infected and don't care because its not slowing down their computer, you know what we call them? We call them botnets.
 
[citation][nom]amk-aka-phantom[/nom]That's the point, I'm not limited. You don't need to be paranoid if you know what you're doing. In fact, having an antivirus IS paranoia.[/citation]

Of course you have no reason to be paranoid. In all likelihood you're doing nothing of consequence or value on your machines. Why waste time targeting an individual when there are more ripe targets to plunder? If you had a database of a few thousand social security numbers that would be one thing, but I doubt the average hacker cares about your MP3 collection or your pirated version of AutoCAD.

Safety isn't as so much a product of your own personal wisdom or arrogance (possibly ignorance--the jury is still out on that one), but comes from the fact that as an individual (yourself) is nearly worthless compared to say, a CEO who is idiotic enough to carry home a copy of his workers' personal information database and leave it on an unsecured home computer.

A common flea will fall through a spider web whereas a more noble insect gets trapped. The second mouse gets the cheese. All that good stuff! A valid method, nonetheless. :)
 
Well he lives in Iran. If he's doing this to end up with a black bag over his head, and wake up in the US somewhere... prison or not, then I'd say he's pretty smart lol....

Otherwise... "I'm 21 and invincible" is a common misconception.
 
Microsoft does sign their own certs. Windows Servers have a certificate server component that does this. Those are used for signing the software itself i'm guessing. While SSL is used merely to identify the server.
In theory if a virus wrote an entry in your hosts file on your pc, it could redirect traffic to the other server, then if the right SSL cert is shown the connection would be allowed and downloading possibly started as well. However come install time, if the OS has no digital signature checking, and instead lets the update validate itself then you're screwed. But i'm pretty sure the OS uses itself to do that work via their crypto dll's just like they can verify that drivers are signed correctly.
 
Nah, he can't. Windows Update has a second check that makes sure the code is signed by Microsoft.
 
[citation][nom]dioxholster[/nom]freedom isnt worth this annoyance.[/citation]
[citation][nom]Benjamin Franklin[/nom]
Those who would give up Essential Liberty
to purchase a little Temporary Safety,
deserve neither Liberty nor Safety.
[/citation]
 
Can't believe all the idiots posting comments - especially Phantom and alidan. Truth hurts. Clueless idiots should not be allowed to post comments
 


That's why you should GTFO =) I suggest you do a few simple experiments on your PC... go to Task Manager once in a while or use Control Panel. Start small... :lol:
 
Status
Not open for further replies.