Researchers hijack computer during software update

Sign your updates!: Devs, sign your updates!

The good news is that this is for applications, not the OS or drivers. Windows updates are signed.

This is one area where having the 64 bit version can be a real advantage: In Vista, 64 bit drivers are required to be signed, but 32 bit drivers are optionally signed. I have no idea if Windows 7 makes signing mandatory for all drivers.

OS updates are always signed.

The bad news is that updates are generally somethings users trust, and will generally be something that users allow past a UAC prompt. So if they can hijack an unsigned application update - they're potentially getting admin privileges.

So application devs - time to sign your updates!

Same should probably go for addons and plugins for applications as well.; Posted by: CobraA1 Posted on: 08/03/09 You are currently: a Guest | Members login | Terms of Use

Reply to Story Reply to Message

Subscribe to this discussion via Email or RSS

Sign your updates! CobraA1 | 08/03/09

What do you think?

Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
Breaking DB2 Platform Barriers Quest Software Are you supporting DB2 on multiple platforms? In this Quest white paper ... Download Now

Thought-provoking progressive ideas on diverse topics that intersect with technology, business, and life, and matter to the world at large. Visit SmartPlanet
More from IBM
How to Drive Better Business Outcomes with Exceptional Web Experiences Download the eBook
Driving Business Agility through SOA Connectivity & Integration Read the White Paper from IBM
Linking Decisions and Information for Organizational Performance Read the Tom Davenport study