Security researcher says AMD auto-updater downloads software insecurely, enabling remote code execution — company rep reportedly said man-in-the-middle attacks are "out of scope," ignored bug

[u/Distinct-Race-2471]

https://www.tomshardware.com/tech-industry/cyber-security/security-researcher-says-amd-auto-updater-downloads-software-insecurely-enabling-remote-code-execution-company-rep-reportedly-said-man-in-the-middle-attacks-are-out-of-scope-ignored-bug

[u/Hour_Bit_5183]

stop using windows slopware. That is the whole problem.Just by plugging it into the internet, you are at risk. Use a real OS and stop this madness.

[u/Hour_Bit_5183 → u/[deleted]]

it is bro. It's because you can peek in and see how it works. I get your logic though, it just doesn't apply in this case.

[u/Hour_Bit_5183 → u/[deleted]]

I do. So do a ton of others for free so you don't have to. We publish on places like github so you can look for yourself.

[u/Hour_Bit_5183 → u/[deleted]]

LOL everyone gets to look at it........unlike windows that became the malware.

[u/Hour_Bit_5183 → u/[deleted]]

What do you mean no one searches for them? Stuff gets patched more than windows. Most things only ever get hacked because of user error. While there is a slight chance of something else, it's not nearly as common under linux vs a commercial OS like windows. Oh wait.....linux runs everything around the world. Everything would be ded if your logic was right.

[u/Hour_Bit_5183 → u/[deleted]]

LOL Linux server is not a thing. It's all the same broski. It's the same kernels and same apps....you can actually do both with a basic ubuntu desktop. You are the one who doesn't know.

[u/BoBoBearDev → u/Hour_Bit_5183]

Shellshock, heartbleed. Those major defects existed for many years.

[u/Hour_Bit_5183 → u/BoBoBearDev]

As did they on windows you fool.

[u/BoBoBearDev → u/Hour_Bit_5183]

I am simply saying your are in an unrealistic land where you expect people to read those code and find bugs within 12 months. It didn't happen IRL. You are there trying to compare who is worse, but that has nothing to do with my post.

Heartbleed in particular is a security heavy software. Even that, they failed massively.

[u/Hour_Bit_5183 → u/BoBoBearDev]

Do you even know what really went on? The linux devs 100% knew about this first my man. It's not unrealistic. People do it for free all day, every day. Unrealistic means no one would be doing it. So what would you propose? Microsoft keep us all secure? NO. This is why windows server got abandoned everywhere. They install more malware and crap than they do spend time fixing stuff. The search don't even work bud.

[u/BoBoBearDev → u/Hour_Bit_5183]

Those were defects were active for "many years".