Skip to content
Better HN
Top
New
Best
Ask
Show
Jobs
Search
⌘K
undefined | Better HN
0 points
heartbreak
6y ago
0 comments
Share
That this exploit can be used to spoof the Windows Update system is a big yikes. You can’t necessarily trust today’s update itself.
0 comments
default
newest
oldest
munchbunny
6y ago
That depends on whether Windows Update is using ECC certificates. A quick scan of my Windows 10 trusted root certificate store shows almost exclusively RSA based certificates, so I’d guess 80% odds that Windows Update itself isn’t affected.
shakna
6y ago
It may still be affected, the system may accept a bad ECC cert and override the RSA cert.
1 more reply
j
/
k
navigate · click thread line to collapse