Automatic updates would seem to be a negative for privacy. They imply a backdoor to force changes on a device. Automatic update features have often been used to reduce consumer rights.
It's not even clear they're a win for security. If you shipped some simple device with so much attack surface it needs security fixes, you're doing it wrong.
Wait what? You think security fixes are a sign that software was built 'wrong'? Every piece of software has security bugs - it's the ones that never have any security fixes that I would be scared of.
You think security fixes are a sign that software was built 'wrong'?
Of course. If it needs a fix, it was built wrong. We've become too accepting of low-security software. There's no excuse for this in embedded devices that don't do much.
Comments
Right.
Automatic updates would seem to be a negative for privacy. They imply a backdoor to force changes on a device. Automatic update features have often been used to reduce consumer rights.
It's not even clear they're a win for security. If you shipped some simple device with so much attack surface it needs security fixes, you're doing it wrong.
Wait what? You think security fixes are a sign that software was built 'wrong'? Every piece of software has security bugs - it's the ones that never have any security fixes that I would be scared of.
You think security fixes are a sign that software was built 'wrong'?
Of course. If it needs a fix, it was built wrong. We've become too accepting of low-security software. There's no excuse for this in embedded devices that don't do much.