It is hearsay (person from a security firm told me, don't remember which one). I'm very curious about the update mechanism. Either way, as a Java app it should not be too difficult to decompile it.