Last week, the Internet was abuzz with the discovery that it was theoretically possible for Mac applications that used the Sparkle updating mechanism to be compromised.
To make sure that this doesn’t happen to any of Karelia’s applications on the Mac, we have issued updates to our product line to use HTTPS so that future updates are secure. (We have also updated to newer versions of Sparkle, which was required in order for the release notes to be visible over the secure connection.)
If you are using copies of Sandvox, The Hit List, or Tangerine! that you downloaded from Karelia (and not the Mac app store), you will want to update to the newest versions: 2.10.4, 1.1.19, and 1.4.3a respectively. You can use the built-in (Sparkle) updating mechanism, or if you want to be extra-cautious, you are welcome to download the new updates directly and replace them manually — just visit the product pages (linked above) to download a fresh copy.