zlacker

>>myster+(OP)
So they say at the provider level update traffic was redirected . Does this also mean their update endpoints didn’t do encryption?

>>getcru+f3
It's also possible the update manifest contained an url that the updater blindly trusted, and by modifying that file you could change what got downloaded.