full-disclosure - Re: Adobe Flash UpdateInstalls Other Warez without Consent

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAM2Hf5nEtaJ+uqezLA_1KuUtz4MfJjKAZe0_XfJCSWFra2khMg@mail.gmail.com>
Date: Thu, 6 Sep 2012 10:56:32 -0700
From: Gage Bystrom <themadichib0d@...il.com>
To: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Adobe Flash UpdateInstalls Other Warez
	without Consent

Uhh I had to update a Windows box just the other day and it didn't install
any toolbars or anything like that. Might wanna start running a few
scans......
On Sep 6, 2012 10:42 AM, "Jeffrey Walton" <noloader@...il.com> wrote:

> On Thu, Sep 6, 2012 at 1:26 PM, James Lay <jlay@...ve-tothe-box.net>
> wrote:
> > On 2012-09-06 11:09, Jeffrey Walton wrote:
> >>
> >> The company that writes the worlds most insecure software [1,2,3] has
> >> figured out a way to further increase an attack surface.
> >>
> >> Adobe now includes additional warez in their updates without consent.
> >> The warez includes a browser and tools bar. The attached image is what
> >> I got when I agreed to update Adobe Flash because of recent security
> >> vulnerability fixes.
> >>
> >> It appears Adobe has become a whore to Google like Mozilla.
> >>
> >> +1 Adobe.
> >>
> >> [SNIP]
> >
> > Perhaps someone didn't uncheck the checkbox on download....
> Fortunately, I still had the browser Windows open (that was opened by
> the update process):
>
> https://get3.adobe.com/flashplayer/download/?installer=Flash_Player_11_for_Internet_Explorer
> .
>
> No check boxes - only instructions to install.
>
> Jeff
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/