[lotuseclat79]

Researcher: Update and You're Owned.

Hundreds of applications that use software updates are making computers more vulnerable to attack.

The lesson to be learned is that before you buy or download any software, inquire as to whether their software update process is encrypted or not.

-- Tom

[perfume]

Dear Tom,
Thank you! This comment below the article was interesting and i want your opinion on it! Quote" HTTPS isn't required for security.

If you want secure updates with HTTP, the update must be signed with a key known to the program (usually a public/private key pair). Then it doesn't matter if someone does a man-in-the-middle attack (and being on a "secure network" doesn't absolve you of that risk, it just removes one point where that can happen." Unquote.