In the first of what will be many articles and videos by Brian Wilson as we absorb the content from his site into EH-Net, he offers up his thoughts on the security practices of those that employ automatic updates in their software.


As with any other columnist, your feedback is encouraged.

Don

Yea I used the example of a game but I have found that like the older Trojan days of free screen savers with extra code there are alot of tools out there (like winbar) that send all kinds of your info back to there master. Just look at the different applications on your PC (winamp, Quick time, Windows, Hamachi, Winbar, IM clients, and many more) and see how many are calling out for no reason with a sniffer. One of the best ways to see this is hook up to and AP that has no real connection to the internet and start sniffing. You will see other that the windows crap (netbios) that there is alot going on behind the seens. I have noticed some of the applications on desktops are going to ports and IP blocks listed in ARIN that are not from companies the software was published from. Just think if you where able to fool some yahoo IM clients to update from your server and you have a nice Trojan in the IM client update. You could build a huge network of computers controlled and ready for bad deeds. I just wanted to hopefully open peoples eyes to the blind trust they put in software they think they can trust.

Brian


Digg here  http://www.digg.com/security/Automatic_Update_Good_or_Bad

Very important article , thank you Slimjim100
for Arabic readers here is the translation http://anti-hacker.info/papers/Auto-Update-arabic.pdf