@brunouy @LukeTospace @M4tlink @saxenaUAB @__apf__ Use only GPG signed binaries. Compromising remote update mechanism no more allows to update client, because only the official build team can sign the release, and so compromised binaries will be rejected by clients.