4 ms·

How is this different than a warranty, which already comes with every device? I agree with you that this should be very explicit, although it’s the consumer’s r

by brap 5y ago

How is this different than a warranty, which already comes with every device? I agree with you that this should be very explicit, although it’s the consumer’s responsibility as well to understand what they’re purchasing. Not sure I understand the 2nd part. If Apple or Google don’t want to issue security fixes after N years, should they remotely disable the device? How many of us are currently using devices beyond their warranty period? How many of us will appreciate it if our devices got disabled “for our own good”?

wolrah 5y ago
> How is this different than a warranty, which already comes with every device? I agree with you that this should be very explicit, although it’s the consumer’s responsibility as well to understand what they’re purchasing. People generally understand the concepts of a warranty and the need for maintenance for something to last in the physical realm. For the most part though in the software world people believe that it's good forever as long as it does what you want it to do. The point is to make that explicit. > Not sure I understand the 2nd part. If Apple or Google don’t want to issue security fixes after N years, should they remotely disable the device? How many of us are currently using devices beyond their warranty period? How many of us will appreciate it if our devices got disabled “for our own good”? I did not say anything should be remotely disabled, I said "shouldn't be connected to the internet". It's not about your own good, it's about the rest of us users of a shared network. Think about it like the road. Vehicle safety inspections aren't for you, they're for the rest of us who don't want to be in the way when your 15 year old tires that "still have plenty of tread" give out. Use outdated and unsupported devices all you want in air-gapped applications, but don't connect it to a public network without extreme restrictions through external firewalls. Since the majority of people don't have the ability nor interest to actually do that, I simplify the recommendation to just "don't connect it to the internet".

by brap 5y ago

wolrah 5y ago

> How is this different than a warranty, which already comes with every device? I agree with you that this should be very explicit, although it’s the consumer’s responsibility as well to understand what they’re purchasing. People generally understand the concepts of a warranty and the need for maintenance for something to last in the physical realm. For the most part though in the software world people believe that it's good forever as long as it does what you want it to do. The point is to make that explicit. > Not sure I understand the 2nd part. If Apple or Google don’t want to issue security fixes after N years, should they remotely disable the device? How many of us are currently using devices beyond their warranty period? How many of us will appreciate it if our devices got disabled “for our own good”? I did not say anything should be remotely disabled, I said "shouldn't be connected to the internet". It's not about your own good, it's about the rest of us users of a shared network. Think about it like the road. Vehicle safety inspections aren't for you, they're for the rest of us who don't want to be in the way when your 15 year old tires that "still have plenty of tread" give out. Use outdated and unsupported devices all you want in air-gapped applications, but don't connect it to a public network without extreme restrictions through external firewalls. Since the majority of people don't have the ability nor interest to actually do that, I simplify the recommendation to just "don't connect it to the internet".