3 ms·
Automatic updates give the update server the ability to compromise your machine.
by fwip 8y ago
Automatic updates give the update server the ability to compromise your machine.
- kitotik 8y agoBut at least you get to choose who is on the list of potential suppliers.
- TaylorAlexander 8y agoMost software updates risk compromising your machine, no? I’m talking about whether external control is required for software updates to occur. As with Windows, where Microsoft can replace software on your machine at any time. On Ubuntu, canonical can add backdoored software to their repositories but they can’t forcibly install software on your machine AFAIK. Maybe I just misunderstood the comment I was responding to.
- rickycook 8y agowell they kinda can... if they do any update to include software, that software can be anything... update systemd to include remote execution, or to install any package they want (but why would it be a package??)
- olliej 8y agoyou're right, an automatic update could install malicious software, but the common request has been to have software that law enforcement can use with any device. e.g. law inforcement gets a tool "BreakEveryonesSecurity.exe/app" that can talk to any device they find. For that to work all devices have to be pre-compromised. Another work for pre-compromised is "insecure".