Remote no-interaction autoupdate is a remote code execution vulnerability, even ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

sneak on May 21, 2021 | parent | context | favorite | on: Now your car is a cybersecurity risk, too

Remote no-interaction autoupdate is a remote code execution vulnerability, even if well-intentioned and cryptographically signed.

WalterBright on May 21, 2021 [–]

And yet security engineers, in a kind of circular madness, demand remote updating so they can update their protections against remote updating.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact