Security of the WSUSOFFLINE UPDATER ?
Posted:
05.02.2015, 22:25by DanielBaker
Has there ever been a formal risk assessment done on this tool? Is there any documentation on the software used or the authors? Is the programing code using secure standards? Great tool but my CORP is suspicious of downloading and using this tool from Germany. How can I convince them this software is not a threat or has been exploited in any way?
Re: Security of the WSUSOFFLINE UPDATER ?
Posted:
06.02.2015, 10:00by aker
Just check the source code. wsusou is open source:
http://trac.wsusoffline.net/browserThe updates are downloaded directly from MS:
viewtopic.php?f=7&t=172There are a few static links, but they all point to a MS server, and all files are signature checked (if verification is enabled).
Except for the self-update, wsusou just connects to MS servers.
viewtopic.php?f=7&t=3863