← Back to context Comment by SoftTalker 4 hours ago Turn on automatic updates. 7 comments SoftTalker Reply nradov 4 hours ago That's great until an attacker compromises the automatic update system and uses it as a vector. SoftTalker 3 hours ago I would wager that far more systems get exploited because they are out of date (sometimes woefully) than by poisoned package repos.But, certainly do your own threat assessment and develop and implement whatever plan works for you. ezfe 4 hours ago That's what cooldowns are for nradov 4 hours ago That's great until you have a public zero-day exploit. 1 reply → InsidiousWombat 2 hours ago but the embargo delayed the updates grumple 4 hours ago This is how you get wrecked by malicious packages being published or other breaking bugs. Pin your versions.
nradov 4 hours ago That's great until an attacker compromises the automatic update system and uses it as a vector. SoftTalker 3 hours ago I would wager that far more systems get exploited because they are out of date (sometimes woefully) than by poisoned package repos.But, certainly do your own threat assessment and develop and implement whatever plan works for you. ezfe 4 hours ago That's what cooldowns are for nradov 4 hours ago That's great until you have a public zero-day exploit. 1 reply →
SoftTalker 3 hours ago I would wager that far more systems get exploited because they are out of date (sometimes woefully) than by poisoned package repos.But, certainly do your own threat assessment and develop and implement whatever plan works for you.
ezfe 4 hours ago That's what cooldowns are for nradov 4 hours ago That's great until you have a public zero-day exploit. 1 reply →
grumple 4 hours ago This is how you get wrecked by malicious packages being published or other breaking bugs. Pin your versions.
That's great until an attacker compromises the automatic update system and uses it as a vector.
I would wager that far more systems get exploited because they are out of date (sometimes woefully) than by poisoned package repos.
But, certainly do your own threat assessment and develop and implement whatever plan works for you.
That's what cooldowns are for
That's great until you have a public zero-day exploit.
1 reply →
but the embargo delayed the updates
This is how you get wrecked by malicious packages being published or other breaking bugs. Pin your versions.