A new update request would direct the target to a fake webpage. Apple now uses https.
More at http://blogs.wsj.com/digits/2011/11/21/surveillance-company-says-it-sent-fake-itunes-flash-updates-documents-show/"
Link to Original Source
Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!
"Love your country but never trust its government." -- from a hand-painted road sign in central Pennsylvania