News for hackers. Stuff that matters.

A comment on ASUS delivers BIOS/UEFI auto-updates over HTTP with no verification. Parent comment

Re:ASUS delivers BIOS/UEFI auto-updates over HTTP with no ve... by newman314 on Sunday June 05, 2016 @02:33PM (#11842355)
I wonder if someone has built a transparent proxy/router level implementation of HTTPS Everywhere... That might be quite useful.
[ Parent | on HN ]
Re:ASUS delivers BIOS/UEFI auto-updates over HTTP with no ve... by adam-ff on Monday June 06, 2016 @07:00AM (#11845815)
That's like mailing a postcard to a company that puts it in an envelope for you.
[ Parent | on HN ]
Re:ASUS delivers BIOS/UEFI auto-updates over HTTP with no ve... by newman314 on Monday June 06, 2016 @02:37PM (#11849123)
Not really. I was thinking along the lines of a localized instance so it would be more akin to things being captured at the perimeter and getting converted there.

So outbound to an insecure HTTP url gets rewritten to pull from a HTTPS url instead etc.

[ Parent | on HN ]