Airgapping is a very useful layer of defence in a lot of applications. Never pushing updates is usually a bad idea, but automatic updates pushed by the OS or eq

Airgapping is a very useful layer of defence in a lot of applications. Never pushing updates is usually a bad idea, but automatic updates pushed by the OS or equipment vendor can be equally problematic. Regressions are irritating on consumer devices, but they can be catastrophic in critical embedded systems. If there's anything that can be called a "solution", it looks very much like good engineering. No technology or methodology can stop you from shipping broken systems. If you're shipping ATMs that run Windows XP in 2011, your problems almost certainly run much deeper than a bad choice of platform.