6 ms·

The Free Software Foundation (FSF) calls the update system used in Windows 10 a "back door" [1], I think because it installs updates automatically. This sounds

The Free Software Foundation (FSF) calls the update system used in Windows 10 a "back door" [1], I think because it installs updates automatically. This sounds like nonsense to me, because it implies that I installed a back door on my own machine by enabling automatic upgrades (on Trisquel). It's meaningful that the Windows 10 install method has no (official) way to disable it, but I don't think making something optional could make it not a back door, if it was one before. Even when automatic updates are disabled, I'm not going to be reading every update so the effect seems mostly the same, regardless of whether updates are automatic or not. The FSF's definition of "back door" (at the bottom of the linked page) is "any feature of a program that enables someone who is not supposed to be in control of the computer where it is installed to send it commands" which leaves a lot of ambiguity with the words "supposed to be". I am not sure how to interpret this definition. [1] https://www.gnu.org/proprietary/proprietary-back-doors.html#windows-update https://www.gnu.org/proprietary/proprietary-back-doors.html#...

br0ceph 1mo ago
I agree with any automatic updates being a back door. Doesnt really matter which platform, automatic updates are bad news. On windows it led to clownstrike. On BMW it led to dash ads. Theres infinite examples of auto updates being an attack vector for OEMs and other bad actors. Always disable updates on every product. Can always reenable as needed or even sideload updates.
- JacobKfromIRC 1mo ago
  How do you decide when to update?
  - br0ceph 1mo ago
    thats a tough decision if something aint broke, dont fix it. if there is a reason to upgrade, maybe wait until there are good reviews before actually applying it or make a safety backup first
gmueckl 1mo ago
The FSF definition can be interpreted in absurd ways; a very uncharitable interpretation would classify any network stack connected to the internet as backdoor because random, potentially misdirected packages trigger code exécution on the target machine, even if only to figure out that the packet must be ignored.

br0ceph 1mo ago

I agree with any automatic updates being a back door. Doesnt really matter which platform, automatic updates are bad news. On windows it led to clownstrike. On BMW it led to dash ads. Theres infinite examples of auto updates being an attack vector for OEMs and other bad actors. Always disable updates on every product. Can always reenable as needed or even sideload updates.

JacobKfromIRC 1mo ago
How do you decide when to update?
- br0ceph 1mo ago
  thats a tough decision if something aint broke, dont fix it. if there is a reason to upgrade, maybe wait until there are good reviews before actually applying it or make a safety backup first

gmueckl 1mo ago

The FSF definition can be interpreted in absurd ways; a very uncharitable interpretation would classify any network stack connected to the internet as backdoor because random, potentially misdirected packages trigger code exécution on the target machine, even if only to figure out that the packet must be ignored.