Updating Signal
signal update tells you whether a newer version of Signal exists. It never downloads, opens or replaces anything: a new version is requested on the Intrusion Academy website, the same way as the first one.
The commands
signal update # say whether a newer version exists
signal update -from <url> # ask that address instead (testing)It answers Signal 1.0.1 is up to date, or Signal 1.0.2 is available. Download it from https://intrusion.academy/signal/update. The exit status is 0 when it could check, 1 when it could not (no network, a proxy refusing, an unexpected answer), and 2 for invalid usage.
What it does
One small question. It makes one HTTPS request to
https://intrusion.academy/signal/latest.jsonthrough the host's proxy and certificate store, and reads the latest version number. It sends nothing else about the host.The download address is built in. The address it prints is part of
signal.exe, never taken from the answer, so a changed answer cannot send you somewhere else.A survey never checks.
signal livenever checks for updates and never reaches the network except to push. Checking is its own command, run by you.
Getting the new version
-
Request it
Open intrusion.academy/signal/update: it leads to the same request form as the first download. The email says it is an update.
-
Check it
Compare the SHA-256 of the file you saved with the one on the download page, then run
signal version. -
Replace the old copy
Put the new
signal.exewhere the old one was: the host folder, or the share your fleet runs it from.
What a check leaves on a host
A connection to intrusion.academy (your proxy may log it) and the usual traces of starting a program. No file is written.