Comment by roywiggins
9 years ago
> Now the code contains the ability to go fetch arbitrary code behind our backs and run it against our will.
How is that not what automatic updates are?
9 years ago
> Now the code contains the ability to go fetch arbitrary code behind our backs and run it against our will.
How is that not what automatic updates are?
Right. I trust my browser vendor to send me automatic updates without me reviewing because I believe that's net good for my security. I'd prefer to live in a world where I don't have to question that.
There are definitely situations like corporate networks where automatic updates need to be quarantined and tested before rolling them out to all the machines, but since I don't pay a dedicated sysadmin to run tests on all my software on my personal computer before I receive updates, I'm content to trust my browser to update itself and hope it doesn't break anything.
It's disheartening when the update is a marketing tie-in.