Windows 7 Update appears to be compromised?

Re:Windows 7 Update appears to be compromised? by Someone1234 on Wednesday September 30, 2015 @01:02PM (#10305369)

> Shouldn't Microsoft be signing updates so that redirection attacks don't work?

Microsoft sign updates and utilise HTTPS.

Given how few users are impacted by this suspect update, it may be the result of malware on their local machine. If malware has root then all bets are off, the signing requirement can be removed.

[ Parent | on HN ]

Re:Windows 7 Update appears to be compromised? by dpark on Wednesday September 30, 2015 @01:05PM (#10305405)

Why would malware bother to hijack the update system like this? It seems like a lot of work to trick the user into installing something that the malware could just install directly.

[ Parent | on HN ]

Re:Windows 7 Update appears to be compromised? by Someone1234 on Wednesday September 30, 2015 @01:09PM (#10305438)

I concede this point. Seems like a whole lot of work for little to no pay off.

[ Parent | on HN ]

Re:Windows 7 Update appears to be compromised? by anonymfus on Wednesday September 30, 2015 @02:12PM (#10305910)

To convince people to disable automatic updates?

[ Parent | on HN ]

Re:Windows 7 Update appears to be compromised? by RIMR on Wednesday September 30, 2015 @02:21PM (#10305985)

Yeah, I'm sure someone compromised Windows Update as a public service...

[ Parent | on HN ]