現在位置: Dorian's Gallery >
Screenshots >
Windows Update Agent 7-6-7600-256 installed on 6-24-2012
Windows Update Agent 7-6-7600-256 installed on 6-24-2012
by Dorian Muthig
- 撮影日:
- June 25th 2012 2:06 PM
- 撮影場所:
- None
- 説明:
- So, this apparently installed automatically, despite the setting being "download & install later". It has no knowledge base number, even though the correct one would be KB949104 (this link uses TLS, but will redirect to simple HTTP *cough*). This is bad, and extremely suspicious, because the certificate tree is compromised and/or the update server could have been altered, intercepted or spoofed (doesn't use TLS and configuring TLS will have the TLS server serve redirection to the non-TLS URLs).
Such updates should follow three things:
1. Be correctly titled to include a knowledge base number that matches an existing and correctly titled knowledge base article for the update.
2. Be listed as a new update and install alongside all other updates issued on patch day (second Tuesday of the month)
3. Obey the rules set forth in the automatic updates settings as defined by the administrator and not install automatically no matter what that setting says. - カメラ:
- Print-Screen key
- レンズ:
- None
- フィルム:
- Clipboard
- 暗室処理:
- None
- 電子暗室処理:
- Cropped window
- 著作権:
- Dorian Muthig
- 閲覧回数:
- 8157 回
