Trusted code is one bad update away from malware | Hacker News Reader