Comment by crazygringo
3 days ago
Nobody's talking about "properly hardened servers" here. We're talking about the OS used on desktops and laptops by everyday consumers, connecting to the Internet across a wide variety of Wi-Fi access points.
Do you not see the constant stream of zero-day exploits coming out for consumer operating systems? Do you think those don't need to be fixed?
I'm genuinely curious -- I've never come across anyone with your perspective before, so I'm struggling to understand where it's coming from.
Usually i post and forget but your reasonable reply prompted some effort on my part.
I live life so that at any moment, if modern services of society (food, internet, power, shelter, entertsinment, transport, personal defense) ended, and I was forced to use what I had access to, that my quality of life would persist. Besides physical considerations (hydroponics, solar, guns, hardened vehicles), I maintain nonvolitile backups of the same software I use daily - vanilla(unpatched) OSs from xp to 11), current and older browsers, non-ssl based content and servers, games, music, movies, hoards of older hardware in a cage that may may an emp.. never tested it. Anything computer related I have works from a bare metal install with no internet connection period.
I use the same retail desktop, laptop, wifi, cellular, and wan hardware used by most consumers but only if I can reset and inialize it offline, and can use the built in firewall to restrict outgoing connections to a single executable single port whitelist including my phone. Which means no nags, no updates, no new features, no removed features, no app stores, no federated os logins, no new terms of service, and no telemetry unless I choose to connect that program to the internet and the program is flexible enough to use a single port.
Zero day exploits won't work on my android 11 s9 with no play services, deny all firewall, and non standard chrome build. In app browser updates don't work until I manually install the binary, most AI features are broken by default even on my win11 laptop.
It's not an easy life. But if you insist that software and hardware do what you wish, your actions should back that. My actions probably more than most. I pass on a decent amount of IT gigs because they require app tracking or that I use their monitoring software, or vpn... but everything I have I KNOW I control now and until it stops working and I buy two more identical and grossly obsolete replacements.
Based on this response, this thread isn't for you nor about you. The general public needs security updates.