I clicked on them, but noticed that the update comes from a shady source. How can I tell it’s a real thing?