Shifting the updater to utilize https instead of present-day plaintext http could well be very good and simple starting point. It truly is awesome reward if Additionally, it checks new exe's signature, but in first position, it shouldn't allow for any individual on the way in which to in