content: If they implemented it correctly, then the only way a malicious update is coming in, is if someone a) Is already inside your machine altering files or b) has hacked Microsoft and issued a fake update. In both scenarios, this technology makes no difference - your either pwned already or about to be. Assuming they did it correctly, your computer will contact MS for the equivalent of a Torrent File, which includes a hash of the file. If the hash doesn't match, the piece that doesn't match is thrown out. (You can't inject bad data into a torrent, the client will trash the data.) After the download, Windows should additionally verify the validity of the update via certificates. What I am trying to say, is that if they did it right, your actually more secure than before, since Man in the Middle injection will not work on this method of updating even if the attacker has a MS Cert (Somehow).                 48b3