Software updater snuck in a package that is unwanted
Joel Rees
joel.rees at gmail.com
Tue Oct 24 02:55:35 UTC 2017
Bret, in another world, you'd be right. But in that world you'd have the
ability and time to build and maintain your own system and apps, and you
would.
In this world, we have limited resources and lifetimes. We have to put up
with some things that are non-optimal. If selecting notify-don't-update
results in automatic updates when you are in the middle of important work
that can't wait, that's a bug.
If the machinery to check is installed whether you want it or not, it's
just one of several similar potential attack vectors that are hopefully
blocked elsewhere.
We have to make some compromises somewhere.
2017/10/21 15:17 "Bret Busby" <bret.busby at gmail.com>:
> On Sat, Oct 21, 2017 at 3:11 AM, Bret Busby <bret.busby at gmail.com> wrote:
> > On 21/10/2017, Colin Law <clanlaw at gmail.com> wrote:
> >>
> >> A simple question, how do you know when an important security update
> >> is required?
> >
> > Firstly, and, please do not regard this as being argumentative; there
> > is a significant difference between a and important security update
> > being required, and, one being available.
>
> If a security update is available, it is required.
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/
> mailman/listinfo/ubuntu-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20171024/9721168e/attachment.html>
More information about the ubuntu-users
mailing list