Re: Re: Tips for Windows Update Over Tor

[Tripple Moon <tripple.moon@xxxxxxxxx>]

One can also use "Microsoft Baseline Security Analyzer" to check for needed updates and download them locally to be installed later offline...
Its a utility that can be downloaded from M$ site itself.



----- Original Message ----
From: Alexandru Cezar <tor@xxxxx>
To: or-talk@xxxxxxxxxxxxx
Sent: Tuesday, August 18, 2009 2:35:27 AM
Subject: Re: Re: Tips for Windows Update Over Tor

> All depends on if _all_ the various MS updates and mechanisms are properly
> signed/checked by the MS update mechanism. Otherwise, it's one massive
> MITM hole. I've no idea on that.

Yes, they are.

Also, the way to go would probably be a third-party utility that download all required
updates to install them later, offline. One that I can think of is c't Offline Update:

http://www.heise-security.co.uk/articles/80682

Alexandru



--
-------------------------------------------------------------------------
www.posta.ro - Romanias first free webmail since 1998!

_____________________________________________________
- powered by www.posta.ro