A devastating attack that exposed the personal information of 35 million South Koreans was perpetrated after hackers breached the security of popular software provider ESTsoft and planted malicious code on one of its update servers, it was widely reported Thursday. Attackers with Chinese IP addresses uploaded malware to a …
Simply brilliant. A perfect description in one word (even if a bit tricky tongue-wise).
Heard of signatures?
Perhaps I'm naive, but I don't see why verifying the signatures on the updates wouldn't prevent this problem.
- Updated Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
- Elon Musk's LEAKY THRUSTER gas stalls Space Station supply run
- Android engineer: We DIDN'T copy Apple OR follow Samsung's orders
- Windows 8.1, which you probably haven't upgraded to yet, ALREADY OBSOLETE
- VMware reveals 27-patch Heartbleed fix plan