The flaw stemmed from an updater that downloaded files without verifying their digital signatures and used unencrypted ...