Updates question

[Yawhatnever]

How does the program update? I tried it out once about 2 months ago, and it seemed to connect immediately to an outside source in order to start, which made me uncomfortable and hesitant to adopt. Judging by the post about 1.0.3.9 it would seem I was right.

 

Before I go into detail about my own suggestions and ideas about how I'd ideally want it to work, I thought it would be best to ask how the current process works and find out if there are any planned changes to that process.

[Stev]

The program retrieves a list of information from Tip.It. This includes URLs to the resource dll, the update exe, lastest version, fonts, etc. If the version number has changed, the user has the option of letting DGSweeper download an updated one from the URL it retrieved earlier.

 

I have thought about, and am implementing, a better solution in the 1.0.4.0 rebuild. DGSweeper will only retrieve resources if they've changed.

[Yawhatnever]

My worry is mainly from a security standpoint. As the program becomes more popular, it's more likely to become a target. If a determined and skilled hacker were to gain access, either from an oversight in the site's security or gaining access to somebody's admin account, what could happen? SwiftKit's domain being redirected is a perfect example.

 

Moving the update check to a weekly check rather than every time the program starts could minimize the number of people affected in that scenario, although I know you would probably rather have everybody's version up to date to reduce headaches.

 

Do you have anything in place to ensure the program hasn't been tampered with when downloading an update?

Edited August 15, 2012 by Yawhatnever