AMD's auto-updater downloaded software over insecure HTTP, letting attackers inject malware during updates before a 124-day ...