Conversation

Notices

1. Embed this notice
   Sarah Jamie Lewis (sarahjamielewis@mastodon.social)'s status on Friday, 01-Nov-2024 07:39:49 JST Sarah Jamie Lewis

   Auto updates are one of those things that are probably a good thing when applied at a population level, but have really rough edges.

   I hate them, I never want them. The software was working, and then it wasn't. stop making me jump through hoops to do the thing I was doing perfectly fine 20 minutes ago.

   • Mr. Bill, Rich Felker, Elias and Charlie Stross repeated this.
   • Embed this notice
     Sarah Jamie Lewis (sarahjamielewis@mastodon.social)'s status on Friday, 01-Nov-2024 08:13:15 JST Sarah Jamie Lewis

     in reply to

     My spicy take is that auto updates are a security vulnerability best classified as "arbitrary code execution".

   • Embed this notice
     Ariane (nahratzah@mstdn.social)'s status on Friday, 01-Nov-2024 18:43:44 JST Ariane

     in reply to

     @sarahjamielewis We always are afraid of the google voice updates. Because we use text-to-speech to speak, and that uses those datafiles.

     And when there's an update, they'll wipe my settings and make me talk different.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Friday, 01-Nov-2024 18:47:45 JST Rich Felker

     in reply to

     @sarahjamielewis They're not even *good* at population level. They're a sloppy mitigation for software provider failing to provide non-RCE ways to shut off vulnerable functionality or vectors for attackers to access & exploit the vulnerability.