4 ms·
No, it’s like driving a car whose airbag is known to have a fault that will send shards of material into the driver’s face in the event of an accident. (A real
by enneff 4y ago
No, it’s like driving a car whose airbag is known to have a fault that will send shards of material into the driver’s face in the event of an accident. (A real issue that many manufacturers had to issue a recall for.)
This is actually a great analogy now, because Apple (or whoever) regularly issue “recalls” for their known-insecure software in the form of software updates. If you follow the discussion in the info sec community surrounding these updates, often the vulnerabilities that are patched are being actively exploited.
One recent iOS update that comes to mind is one that patched an issue where a PDF sent via iMessage could give remote code execution with no user interaction or visibility. (Actively exploited.)
So yeah, you can drive around with your faulty airbag if the possibility of getting your face mangled doesn’t bother you. Or you can just follow the recall procedure, which is a bit inconvenient but it seems much less inconvenient than facial reconstruction.
And if you don’t care about your data being compromised and sold to bad actors, who may then steal your identity and cause a LOT of trouble for you, then by all means run known-insecure software. That seems like very poor risk assessment to me.
- jjav 4y ago> So yeah, you can drive around with your faulty airbag if the possibility of getting your face mangled doesn’t bother you. Or you can just follow the recall procedure, which is a bit inconvenient but it seems much less inconvenient than facial reconstruction. An interesting example, in that the airbag recall took many years due to the volume of units that needed to be recalled. So no matter what you wanted, you were stuck driving around for a few years with a known risk in your face (literally).