4 ms·
Linux distros can all be configured to update automatically. This does not require external control - the machine is capable of checking update servers on its o
by TaylorAlexander 8y ago
Linux distros can all be configured to update automatically. This does not require external control - the machine is capable of checking update servers on its own and updating if configured to do so. I don’t see how external control would be required for automatic updates.
- fwip 8y agoAutomatic updates give the update server the ability to compromise your machine.
- kitotik 8y agoBut at least you get to choose who is on the list of potential suppliers.
- TaylorAlexander 8y agoMost software updates risk compromising your machine, no? I’m talking about whether external control is required for software updates to occur. As with Windows, where Microsoft can replace software on your machine at any time. On Ubuntu, canonical can add backdoored software to their repositories but they can’t forcibly install software on your machine AFAIK. Maybe I just misunderstood the comment I was responding to.
- rickycook 8y agowell they kinda can... if they do any update to include software, that software can be anything... update systemd to include remote execution, or to install any package they want (but why would it be a package??)
- olliej 8y agoyou're right, an automatic update could install malicious software, but the common request has been to have software that law enforcement can use with any device. e.g. law inforcement gets a tool "BreakEveryonesSecurity.exe/app" that can talk to any device they find. For that to work all devices have to be pre-compromised. Another work for pre-compromised is "insecure".