2 ms·
I'm still only talking about updates. I didn't update xz for example, and I'm glad I didn't because it turned out to be compromised in certain versions.
by ranger_danger 2y ago
I'm still only talking about updates. I didn't update xz for example, and I'm glad I didn't because it turned out to be compromised in certain versions.
- orf 2y agoSure, or it could have left you vulnerable in other versions. Waiting for others to hopefully discover targeted security vulnerabilities and only updating after an ad-hoc timeframe if nobody shouts “FIRE!” isn’t a security posture, it’s just terrible patch management.
- ranger_danger 2y agoI don't think things are always so black and white but I respect your opinion.