How to avoid malware in ROM downloads