Reply to post: Re: File dates

Asus: Yo dawg, we hear a million of you got pwned by a software update. So we got you an update for the update

Anonymous Coward Silver badge
Boffin

Re: File dates

timestamps (mtime/ctime) are trivial to manipulate. Easier even than manipulating the file length. On a *nix box, run `man touch` for a start (I know it sounds like a googlewhack, but it definitely isn't!)

Even without things like the touch utility, someone with enough access to sign their own executable with the legit certificate and host it on the genuine server could probably adjust the system time of the target before planting the file and change it back after.

Basically, do not trust timestamps.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon