This is fucking bonkershttps://twitter.com/Securityinbits/status/1271406138588708866 …
Show this thread
-
Can someone explain Microsoft’s reasoning in not fixing this? Authenticode is not a security boundary? The Windows interface should not be trusted to give security-critical information?
Show this thread
because it is: 1. Not really their fault 2. Not really their problem 3. Even if it was- I have a hard time beleiving it have been used that much. What gets bypassed here is just end point protection software made by third parties- and only if java is installed
-
-
If a third party endpoint protection tool do not scan a file because windows built in signature verification function claims it digitally signed - this method will work. But its not like its usable for bypassing authenticode or the ms signed policy enforcement for pe files.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.