Re:After 36 years as a paid product, the Micro-Cap Circuit S...
by someguydave on Saturday January 25, 2020 @01:23PM
(#22147700)
To me, the fact that the server being exploited to deliver bad binaries is a possibility is reason enough to be cautious, and to therefore not regard them with any more credibility than if they were delivered over unencrypted http.
MITM executable patching attacks are not theoretical. AFAIU, the first hit on "mitm executable infection" [1] and an interceptor (ARP/wifi/whatever) is all a script kiddie needs.
[1] https://n0where.net/mitm-pe-file-infector-peinjector