Filmed at http://2016.dotsecurity.io on April 22nd in Paris. More talks on http://thedotpost.com As more of our applications become dependent on external modules, having secure software update systems becomes increasingly important. Diogo argues that we should operate under an attack model that considers the distribution infrastructure itself as being actively malicious.