3 ms·

3 months? I must have updated FireFox / Discord / VS Code /etc. about a hundred times in last 3 months. Plenty for them to add renewed SSL whatevers inside one

3 months? I must have updated FireFox / Discord / VS Code /etc. about a hundred times in last 3 months. Plenty for them to add renewed SSL whatevers inside one of the updates.

Wowfunhappy 6y ago
> 3 months? I must have updated FireFox / Discord / VS Code /etc. I think this state of affairs is nuts. With the exception of Firefox, because web browsers have an inordinate number of security issues to contend with.
- throwaway53453 6y ago
  And other programs don't?
  - Wowfunhappy 6y ago
    An instant messaging client shouldn’t be executing arbitrary remote code, no.
    - throwaway53453 6y ago
      It's not really possible to prevent that. E.g. a well crafted image can easily trigger an RCE on some older versions of Android: https://nakedsecurity.sophos.com/2019/02/08/android-vulnerabilities-open-pie-to-booby-trapped-image-attacks/ https://nakedsecurity.sophos.com/2019/02/08/android-vulnerab... Issues like this exist at all layers of the stack, so anything touching the internet needs regular security patches.
      - Wowfunhappy 6y ago
        I agree completely. But, I also think that in most cases, if a simplistic piece of software like an IM app needs a security patch every three months, regularly, it's a sign the attack surface is too large.