Hacker News new | ask | show | jobs
by christianmann 3812 days ago
> It can even be automatically updated whenever the app’s developers send out new versions of the program.

This is another potential vulnerability. If the app does not check a good signature, then it may be vulnerable to malicious update delivery.