They look for changes to files like this: http://mesu.apple.com/assets/macos/...RP_A2140/com_apple_MobileAsset_UARP_A2140.xmlHow on earth does the staff at MR find these updates?!
I'm monitoring hundreds of such files, and sometimes that ends up with me or other people giving MacRumors a heads-up, but they probably have their own monitoring now