Search Result

[mSparks]

From the OP...

[mSparks]

I said this seems like a bad idea, not touching it with a bargepole

You said not using it would leave known vulnerabilities on the system....

[mSparks]

Now you have just confused me.
Is updating systemd optional or not?...

[mSparks]

It seems optional because its marked "experimental". Who knows where it goes when its no longer experimental.

luckily this is Linux,...

[mSparks]

Yes
Wonderful, we agree that not upgrading to a version with it at all is the best way of avoiding it.

In fact, after reading the background...

[mSparks]

You can also choose not to install it at all.

That doesnt change installing it and enabling it being a bad idea, does it? "no optional...

[mSparks]

I never made any such argument.



Firstly, good grief no, integrity checking and signing doesn't prove remote code isn't malicious....

[mSparks]

Good grief no. Making a bad idea optional doesn't make it a good idea.

It just makes it an optional bad idea.

Although that...

[mSparks]

Either it discovers and installs remote code automaticallly - bypassing the normal update procedure or it doesnt.
There is no "optional"...

[mSparks]

What part of "this will add RCE vulnerabilities to systemd" did you find unclear or incoherent?
Yes, I will take "definitely doesn't...

[mSparks]

Thanks for the offer but I think I'll just stick with a version of systemd that doesn't have this "feature" then laugh at you when I'm inevitably...

[mSparks]

And if you had bothered paying any attention to any of the current "automatic discovery and install" tools, from upnp to windows update and...

[mSparks]

"automatic discovery and installation of a/b updates"
where a is malicious
and b is the non malicious version that is built from...

[mSparks]

->systemd-sysupdate Tool

This sounds like a really bad idea. Anyone taking bets on how long it is before this is instrumental in a significant...

[mSparks]

Tell me you don't understand the difference between windows and fortnite without telling me you don't understand the difference between windows and fortnite....