Latest in Bits

Image credit:

Windows update software used to compromise security

Ryan Block
May 11, 2007
Share
Tweet
Share

Sponsored Links

After you've done the delicate Windows Validation dance, but before you actually get the latest automatic update, there's a background component running in Windows called BITS (Background Intelligent Transfer Service), tasked with acquiring the key updates that keep your system protected. So you can imagine how security analysts are very interested by Elia Florio's (of Symantec) new paper, outlining security compromises bypassing firewalls via BITS -- but there's a catch. BITS itself isn't compromised, per se, it's just a content acquisition service for Windows. In other words, your machine already has to be compromised for BITS to bypass your firewall; this kind of hack just helps whichever Trojan / worm / virus you've become infected with acquire more software components to aid in its intrusion. So the next time your mom or dad sends you bits-hack-RUN-ME.exe, think twice.

[Thanks, Philip]



In this article: bits, hack, hackers, security, windows
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Share
Tweet
Share

Popular on Engadget

The 2020 Engadget Holiday Gift Guide

The 2020 Engadget Holiday Gift Guide

View
Scientists might know why astronauts develop health problems in space

Scientists might know why astronauts develop health problems in space

View
Belkin’s new wireless charger tries to do what AirPower promised

Belkin’s new wireless charger tries to do what AirPower promised

View
The best Black Friday tech deals we could find

The best Black Friday tech deals we could find

View
Zappos' pioneering ex-CEO Tony Hsieh dies at 46

Zappos' pioneering ex-CEO Tony Hsieh dies at 46

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr