But they are pushed through Windows Update? Doesn't everything there have to be ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		0x0 on Oct 22, 2014 \| parent \| context \| favorite \| on: FTDI driver kills fake FTDI FT232s But they are pushed through Windows Update? Doesn't everything there have to be WHQL?

rwmj on Oct 22, 2014 [–]

Correct. To use the non-MSFT signed approach, the driver has to add the cert to the registry beforehand somehow (eg. using certutil -addstore -f TrustedPublisher), which obviously rules out a straight install using Windows Update.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact