Re: Tectonic Shifts

[Blue Boar <BlueBoar () thievco com>]

Stefan Wagner wrote:

> On Wed, Dec 10, 2003 at 10:36:38AM -0500, Dave Aitel wrote:
> > computer, I have to assume that Windows Update has been owned at least
> > once.
> At least once by 'Code Red':
> http://www.attrition.org/mirror/attrition/2001/07/19/windowsupdate.microsoft.com/
> I don't know if M$ started applying their own patches or not since then, doubt 
> beeing owned by a worm says anything about security :>

Right, it got wormed.  But, does owning Windowsupdate do you any good 
without the signing key?  Sure, I imagine there are some significant number 
of people who will click whatever for the unsigned code, but then you could 
be windowsupdate with some DNS games.

                                                BB

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave