3 ms·
Right, but this is expensive and dumb so nobody is going to do it themselves. And then you’re back to trusting an external third party, just slower and with gr
by orf 2y ago
Right, but this is expensive and dumb so nobody is going to do it themselves.
And then you’re back to trusting an external third party, just slower and with greater expense.
- ranger_danger 2y agoI don't think it's dumb, I have been saved from disaster too many times to count, by just waiting a little bit after something new comes out, to see if other people start having problems that might affect me.
- orf 2y agoThat’s a different thing entirely - waiting for a review of a product before purchasing is different from inherently untrusting the manufacturer of the product, as it may contain something malicious that is targeted at you.
- ranger_danger 2y agoI'm still only talking about updates. I didn't update xz for example, and I'm glad I didn't because it turned out to be compromised in certain versions.
- orf 2y agoSure, or it could have left you vulnerable in other versions. Waiting for others to hopefully discover targeted security vulnerabilities and only updating after an ad-hoc timeframe if nobody shouts “FIRE!” isn’t a security posture, it’s just terrible patch management.
- ranger_danger 2y agoI don't think things are always so black and white but I respect your opinion.