3 ms·
> a failed update (for whatever reason) results in the definitions remaining in their existing pre-update state Fantastic solution! You just gave the attackers
by warkdarrior 2y ago
> a failed update (for whatever reason) results in the definitions remaining in their existing pre-update state
Fantastic solution! You just gave the attackers a way to stop all security updates to the system.
- monocasa 2y agoWhen you can't verify an update, rolling back atomically to the previous state is generally considered the safest option. Best run what you can verify was a complete package from whoever you trust.
- JohnBooty 2y agoNo, that doesn't follow. For most systems, a sensible algorithm would be "keep running the last known good definition, until we get the next known good definition" In other words: ignore bad updates but keep checking for valid ones. That doesn't mean you've permanently lost the ability to update. Of course, for some systems, different behavior might make more sense.