News for hackers. Stuff that matters.

A comment on RCE Vulnerability in QBittorrent. Parent comment

Re:RCE Vulnerability in QBittorrent by sneak on Saturday November 02, 2024 @12:47AM (#42024133)
No. The lack of certificate checking means anyone with access to the network in between; a rogue AP is sufficient.
[ Parent | on HN ]
Re:RCE Vulnerability in QBittorrent by 0x457 on Saturday November 02, 2024 @01:15PM (#42027691)
If you're connecting to a rogue AP, then you are already lost.
[ Parent | on HN ]
Re:RCE Vulnerability in QBittorrent by detaro on Saturday November 02, 2024 @01:27PM (#42027757)
Only if software you use is badly broken, like QBittorrent here. For the majority of applications today, a rogue AP can't do much interesting that won't immediately cause alerts.
[ Parent | on HN ]