Hacker News new | ask | show | jobs
by xnyhps 3579 days ago
It's pretty scary that they still haven't fixed the Sparkle RCE vulnerability from a few months back. Attackers with access to their servers could've installed malware for every user, even if they didn't install the update.