• 5 Posts
  • 1.64K Comments
Joined 2 years ago
cake
Cake day: August 21st, 2024

help-circle














  • they did their autoupdate through an unencrypted connection, without any verification, and just executed the payload locally. when pressed about it they added https but then it turned out they had no auth on the update server. it was a whole thing, took several years for them to correct and they complained every step.