On Tue, Aug 4, 2009 at 12:05 PM, Jeff Bunting<[email protected]> wrote: > Interesting article about a new attack: > Automated updates: Why they may not be such a good idea > http://blogs.techrepublic.com.com/security/?p=2056&tag=nl.e036
Short version: Most software doesn't check the authenticity of updates before installing them. They note that Microsoft's update tools at least do *that* much. I find it telling that in the same way that most users will install whatever the Internet tells them to, most software will install whatever the Internet tells them to. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
