4 ms·

I like to call auto-update functionality what it really is: a deliberate RCE vulnerability.

• dtx1 4y ago
  That's an unfair argument to make though. I think in practical terms an auto update on a browser like chrome prevents an enormous amount of security breeches from truly malicious, criminal actors using public CVEs for their average users. And as much as i dislike google and their privacy invasions, chrome is likely one of the most secure browsers out there and a lot of people rightfully rely on chrome's security for very important things like their online banking. I'd rather have my mom use auto-updating chrome than having to remind and reteach her how to update chrome manually once a week.