News for hackers. Stuff that matters.

A comment on The RCE that AMD won't fix. Parent comment

Re:The RCE that AMD won't fix by thedanbob on Friday February 06, 2026 @07:41AM (#46912108)
The update check is HTTPS, only the files themselves are HTTP.
[ Parent | on HN ]
Re:The RCE that AMD won't fix by pmontra on Friday February 06, 2026 @09:00AM (#46912909)
I missed that, thanks!
[ Parent | on HN ]
Re:The RCE that AMD won't fix by cestith on Friday February 06, 2026 @10:01AM (#46913644)
TLS doesn’t mask the IP of the server. The updater probably isn’t using DNS over HTTPS. If I can determine that a user’s updater just hit the update check server, I can start impersonating the update server.

That takes it out of the one day away territory, but it does allow an attacker to only have a malicious HTTP capture up and detectable during the actual attack window.

Then, of course, if you’re also being their DNS server you can send them to the wrong update check server in the first place. I wonder if the updater validates the certificate.

[ Parent | on HN ]