I despise how security updates are bundled with feature updates.
Uncategorized
29
Posts
19
Posters
62
Views
-
@Em0nM4stodon
I remember when you had to protect your OS from malware instead of your OS actually being the malware you have to protect yourself from.I remember when the people you had to keep out of your computer were criminals, rather than the police.
-
I despise how security updates are
bundled with feature updates.Now we have to choose between risking getting malware from random criminal gangs when refusing to update, or getting embedded malware from the tech company itself that comes with their update.
And honestly at this point, I'm not sure which is worse.
@Em0nM4stodon security and feature updates should be separate as far as is practical
except where a feature strictly depends on another feature every feature should be selectable separately
-
I despise how security updates are
bundled with feature updates.Now we have to choose between risking getting malware from random criminal gangs when refusing to update, or getting embedded malware from the tech company itself that comes with their update.
And honestly at this point, I'm not sure which is worse.
@Em0nM4stodon sometimes, the best option is to change software packages. Harder to do with the OS.
-
@Em0nM4stodon security and feature updates should be separate as far as is practical
except where a feature strictly depends on another feature every feature should be selectable separately
-
I despise how security updates are
bundled with feature updates.Now we have to choose between risking getting malware from random criminal gangs when refusing to update, or getting embedded malware from the tech company itself that comes with their update.
And honestly at this point, I'm not sure which is worse.
@Em0nM4stodon At least equally bad
-
I despise how security updates are
bundled with feature updates.Now we have to choose between risking getting malware from random criminal gangs when refusing to update, or getting embedded malware from the tech company itself that comes with their update.
And honestly at this point, I'm not sure which is worse.
@Em0nM4stodon what do you think is a reasonable and sustainable software update model? How many versions behind do you back port fixes to? For how many months/years?
-
I despise how security updates are
bundled with feature updates.Now we have to choose between risking getting malware from random criminal gangs when refusing to update, or getting embedded malware from the tech company itself that comes with their update.
And honestly at this point, I'm not sure which is worse.
@Em0nM4stodon where are the Linux phones? There are barely any on the market. It's ridiculous. They should have been ready years ago.
Not to be paranoid but I'm pretty certain there is a conspiracy going on, that will be a public knowledge like the light bulb cartel is today.
-
@Em0nM4stodon what do you think is a reasonable and sustainable software update model? How many versions behind do you back port fixes to? For how many months/years?
@Aurimas It really depends on each piece of software and the type of data it handles.
-
@Em0nM4stodon where are the Linux phones? There are barely any on the market. It's ridiculous. They should have been ready years ago.
Not to be paranoid but I'm pretty certain there is a conspiracy going on, that will be a public knowledge like the light bulb cartel is today.
@licho I wish there was way more Linux phone models available from everywhere in the world. It's insane that we have so few accessible choices in mobile software.
-
@Em0nM4stodon what do you think is a reasonable and sustainable software update model? How many versions behind do you back port fixes to? For how many months/years?
@Aurimas @Em0nM4stodon What’s most irritating about this to me is companies which ship security-only updates, but only to weird versions of the product. For example, Microsoft has LTSC versions of Windows (e.g, Windows 11 IoT Enterprise LTSC) which get security updates at the same time as the mainstream versions for *ten years*, and they don’t get any feature updates! They’re already doing the work of porting fixes around, they just don’t let the mainstream versions take advantage of it.
-
@Aurimas It really depends on each piece of software and the type of data it handles.
@Em0nM4stodon I think it is really difficult to maintain and sustain more than just the latest version of a piece of software, which then in turn leads to fixes shipping together with features. Having had to back port security fixes to an old version of Android I really feel for picking the lowest cost way out.
-
@Em0nM4stodon where are the Linux phones? There are barely any on the market. It's ridiculous. They should have been ready years ago.
Not to be paranoid but I'm pretty certain there is a conspiracy going on, that will be a public knowledge like the light bulb cartel is today.
@licho @Em0nM4stodon Eh?? Why would you want a Linux phone when you could grab a Pixel with bleeding edge security updates to firmware that is open to active development for alternative OSs like GrapheneOS?
And btw it's no conspiracy there are Linux phones on the market. They are nowhere near comparable to security you get with GOS.
-
@licho @Em0nM4stodon Eh?? Why would you want a Linux phone when you could grab a Pixel with bleeding edge security updates to firmware that is open to active development for alternative OSs like GrapheneOS?
And btw it's no conspiracy there are Linux phones on the market. They are nowhere near comparable to security you get with GOS.
@x41h @Em0nM4stodon grapheneOS is still android. Pixel is made by Google.
There's a difference between "barely any" and "no". I said barely any. There are Linux phones but there are very few of them and they all suck. Most are "currently out of stock".
If there was a conspiracy it's unlikely you or I would know it for sure.
-
@x41h @Em0nM4stodon grapheneOS is still android. Pixel is made by Google.
There's a difference between "barely any" and "no". I said barely any. There are Linux phones but there are very few of them and they all suck. Most are "currently out of stock".
If there was a conspiracy it's unlikely you or I would know it for sure.
@licho @Em0nM4stodon the only conspiracy is that Google tried to block sideloading APKs. I wonder why... GOS team are to release news of an OEM deal at some point.
-
@Em0nM4stodon I think it is really difficult to maintain and sustain more than just the latest version of a piece of software, which then in turn leads to fixes shipping together with features. Having had to back port security fixes to an old version of Android I really feel for picking the lowest cost way out.
@Em0nM4stodon @Aurimas Really irritating thing about the current Apple situation is that they are still providing security updates for older versions of the operating systems, but only on devices which cannot install 26. -
@Em0nM4stodon @Aurimas Really irritating thing about the current Apple situation is that they are still providing security updates for older versions of the operating systems, but only on devices which cannot install 26.
@pacavegano @Em0nM4stodon what do you think they should do instead?
-
I despise how security updates are
bundled with feature updates.Now we have to choose between risking getting malware from random criminal gangs when refusing to update, or getting embedded malware from the tech company itself that comes with their update.
And honestly at this point, I'm not sure which is worse.
@Em0nM4stodon ok, but look on technical side, most of updates is in binary format, and assumes one state, and leads to other. Now if you would like to have 2 updates, one for security, one for features.... it is difficult (I would like to say impossible) in diff approach.
You don't have 1 "start" version but multiple... maybe user has prev security, but not features....
Even for single app it seems that you would need to produce multiple versions of the same update.... lets say, you would always keep only 10 back... so 10 back, user can go with full, or only security... so there are 2 10 back, 9 back... user may start from each of those and choose going with features, or with security.... what will be even more wired...
Even if it would be distributed on source level... nope... it would be backporting security changes, or sometimes writing several versions of those....Or you have some idea how to do it? Maybe there is some doable way I simply don't see, hope you will share 🙂
-
@pacavegano @Em0nM4stodon what do you think they should do instead?
@Em0nM4stodon @Aurimas I think that they should allow users of any device to choose to continue to run the older operating system, with security updates, for as long as they continue to provide those updates on any device. -
@Em0nM4stodon @Aurimas I think that they should allow users of any device to choose to continue to run the older operating system, with security updates, for as long as they continue to provide those updates on any device.
@pacavegano @Em0nM4stodon so every OS version for every device for as long as they sell a device?
-
I despise how security updates are
bundled with feature updates.Now we have to choose between risking getting malware from random criminal gangs when refusing to update, or getting embedded malware from the tech company itself that comes with their update.
And honestly at this point, I'm not sure which is worse.
@Em0nM4stodon
Dear Debian,
Thank you for being Debian.
Love, Your users.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
La recita da duro di Pete Hegseth gli si sta ritorcendo contro.
I sostenitori di MAGA speravano che il segretario alla Difesa li avrebbe fatti sentire virili, ma con la guerra all'Iran li ha messi in imbarazzo.
https://www.salon.com/2026/03/13/pete-hegseths-manly-act-is-backfiring/
-
Il completamento automatico dell'intelligenza artificiale non cambia solo il modo in cui scrivi. Cambia anche il modo in cui pensi.
Gli strumenti di scrittura basati sull'intelligenza artificiale sono sempre più integrati nelle nostre e-mail e nei nostri telefoni. Ora un nuovo studio rivela che i suggerimenti distorti dell'intelligenza artificiale possono influenzare le convinzioni degli utenti.
-
Dave, @davew writes: "Coder is analogous to calling a chef a chopper." lol yeah i should call painters "brushers" or "watercolour devs" or something :-)
-
@gloriouscow @lritter i don't know of any hash tags for those but i'd be astonished if there weren't any
-
-
@gloriouscow @cr1901 For myself, with regards to dealing with the cognitive dissonance, of watching technologists I personally know and admire adopt LLMs (some of which are on here, too, and who I am somewhat embarrassed to say have seen my unhinged anti-AI posts 😅):
I think this has been much easier for me to deal with, because my personal observation for a long time has been that technologists have a very weak sense of ethics. Both in the sense of having good ethics that I agree with, and in the sense of having thought about the subject of ethics at all. Most technologists have not sat down and decided what their moral boundaries are, and what the relationship of their own morality is to the technology they use or develop. Even very skilled ones that I have learned a lot from. Most people are content to think that technologies are value-neutral, and are content to follow the trend of what everyone else is doing.
I have observed brilliant technologists, long before LLMs, shrug at the ethics of many other things, so for me it is entirely believable that they shrug at the ethics of this, too. I don't think many of these people are inherently morally bad, but I do think that they just don't care. This is bad because I do think that people just following the trend into widespread AI adoption is an ethically bad outcome. However, I also think that as AI backlash increases, if the pendulum swings back to anti-AI being the norm in software: they will follow as well.
It is also the sad truth that for minority women in many computer fields, we must work with brilliant peers who are not necessarily bad people, but who by way of their privileged position in life will say and do ignorant things. We must see someone saying something hurtful, but not make a fuss about it, because it's not worth the time of having to personally educate that person, to deal with the backlash, or to be labelled as a "confrontational" person. And we must do this as well, for brilliant colleagues and mentors and people we admire, and that we learn a lot from. So in that sense, I am very well practiced at this kind of cognitive dissonance - I do it in order to preserve a career.
I hope this is maybe a little helpful for you, though this is only my personal experience. And if you do take a break, I hope it is a restful and rejuvenating one!
-
@gloriouscow @lritter also I recommend # macrophotography (and the various non-english equivalents) though fair warning it has the occasional closeup on insects. my wife introduced me to that one last night :)
-
@gloriouscow here's the list I gave @lritter https://mastodon.gamedev.place/@aeva/115947337211705540
