> We trust applications like that all the time. Browsers update themselves, Not if you're using a Linux distribution's browser packages (we patch out the auto-

> We trust applications like that all the time. Browsers update themselves, Not if you're using a Linux distribution's browser packages (we patch out the auto-update code because you should always update through the package manager). And distributions build their own binaries, making attacks against builders much harder. While people might trust auto-updating applications, they really shouldn't. And there are better solutions for the updating problem.