2 ms·
No one is arguing a compromise of the update server doesn't allow compromising all customers. They're arguing that the benefits out auto-updating software (espe
by arkadiyt 6y ago
No one is arguing a compromise of the update server doesn't allow compromising all customers. They're arguing that the benefits out auto-updating software (especially consumer software) outweigh the risk of a compromised update server, which is generally true.
- sneak 6y agoWhat about users who don't consent to that, who would prefer to manually update in a safe manner? Making the decision for a user is the issue. Consent to run software A on Monday is not consent to run unknown/unexamined software B on Tuesday. In the vast majority of cases, receiving userspace updates in a timely fashion is not worth this real-time remote access vulnerability.