If your system is secure, updating it can only make it insecure. If that is your one and only priority, you have to review updates before applying them, and since you have thoroughly investigated your entire stack up to this update and that version also has your real-world testing behind it, you’re probably not going to apply most updates until some other priority comes along or you discover a previously unknown vulnerability.
I mean, yes, if you can guarantee that all your software stack in 100% secure. In reality this is unfeasible on even mathematically impossible to do formally (reducible to the halting problem). So while bugs keep being found in things like the Linux kernel (naturally, nothing is immune to oversight), and they’re always going to be, keep your software up to date.
even mathematically impossible to do formally (reducible to the halting problem).
Nah, if the programs are not arbitrary (and I hope they’re not, considering that you chose them) then it doesn’t reduce to that. But you are right that it is not feasible for most industries and he is right that in some industries it is not only feasible but required.
If security is the one and only priority, you wouldn’t be running a goddamn desktop environment and all that other baggage. You absolutely would be auditing your entire stack. Because security is the one and only priority. I didn’t pose the hypothetical, but that’s the necessary consequence.
i recently found out that i was running 5 year old graphics drivers, and the reason i found out was that a newish (less than 5 yo) game kept crashing a few minutes after startup, with no exception. turns out updating your drivers does sometimes matter
Graphics drivers are strange, unlike all other drivers where the driver is written and then the software can use the interface, with graphics drivers the drivers get changed after the software is released to make it work better or at all.
Imagine making sofware that is broken and then just waiting for the drivers to fix it.
Why I don’t update software:
Why I do update software:
What if I told you with each Windows update, Microslop hacks you a bit more
What if I told you Linux btw
I’d say you’re right
If your system is secure, updating it can only make it insecure. If that is your one and only priority, you have to review updates before applying them, and since you have thoroughly investigated your entire stack up to this update and that version also has your real-world testing behind it, you’re probably not going to apply most updates until some other priority comes along or you discover a previously unknown vulnerability.
This “logic” overlooks a number of issues.
Firstly, no system is “secure”, only more so or less so given a specific threat model.
Secondly, a system can become less secure without any changes, as exploits are discovered.
The Internet has been an adversarial environment since at least 1988
Thanks to recent AI advances, new security vulnerabilities are being found at a crazy pace in all layers of the stack, from firmware to GUI.
I mean, yes, if you can guarantee that all your software stack in 100% secure. In reality this is unfeasible on even mathematically impossible to do formally (reducible to the halting problem). So while bugs keep being found in things like the Linux kernel (naturally, nothing is immune to oversight), and they’re always going to be, keep your software up to date.
Nah, if the programs are not arbitrary (and I hope they’re not, considering that you chose them) then it doesn’t reduce to that. But you are right that it is not feasible for most industries and he is right that in some industries it is not only feasible but required.
If security is the one and only priority, you wouldn’t be running a goddamn desktop environment and all that other baggage. You absolutely would be auditing your entire stack. Because security is the one and only priority. I didn’t pose the hypothetical, but that’s the necessary consequence.
i recently found out that i was running 5 year old graphics drivers, and the reason i found out was that a newish (less than 5 yo) game kept crashing a few minutes after startup, with no exception. turns out updating your drivers does sometimes matter
Graphics drivers are strange, unlike all other drivers where the driver is written and then the software can use the interface, with graphics drivers the drivers get changed after the software is released to make it work better or at all.
Imagine making sofware that is broken and then just waiting for the drivers to fix it.