undefined | Better HN

0 pointsethbr11y ago0 comments

> No device should be updated without the *owner* explicit intention to do so.

That point has practical issues, because most consumer electronic customers are technically dumb.

Consequently, you end up with a long-tail of deployed device firmware versions, which makes support a nightmare (fix this external integration that broke... across 20 different versions).

I'd phrase it more in terms of:

   - Every device must include an option for owners to disable automatic firmware updates.

0 comments

MiddleEndian1y ago

>That point has practical issues, because most consumer electronic customers are technically dumb.

It's a speaker that worked fine until Samsung unilaterally broke it. I don't think the customers are the dumb ones here.

ziddoap1y ago

The original comment and the reply are talking generally, not specifically about this one case.

davkan1y ago

Customers will gladly use an outdated browser or OS with known exploits to access their most sensitive information. Automated updates are necessary evil. Even a smart speaker with a vulnerability could end up as part of a botnet.

gr4vityWall1y ago

Then we should strive to improve computer literacy. I think technological solutions should still ultimately empower their users.

1 more reply

derf_1y ago

I think this is completely rational given a realistic threat model. As a customer, I've had my browser hacked exactly never, but examples of feature downgrades from vendors abound. Vendors are a much more serious attack vector than a random hacker.

2 more replies

account421y ago

> Customers will gladly use an outdated browser or OS with known exploits to access their most sensitive information.

Because the alternative is worse. It's up to companies to provide security-only updates that customers can trust and will CHOOSE to install.

j / k navigate · click thread line to collapse