Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
breakingcups
on June 6, 2016
|
parent
|
context
|
favorite
| on:
ASUS delivers BIOS/UEFI auto-updates over HTTP wit...
Not exactly true. If you as a malicious third person can MITM the http connection for updates, you can push an older signed package with known vulnerabilities.
jbk
on June 6, 2016
[–]
Only if the installer does not check/warn about downgrades.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
