
Summary Bullets:
- IT security issues are being exacerbated by unregulated auto-update mechanisms.
- Systemic and fundamental change to a centralized, approval-based update system is necessary.
A simple rule of thumb for complex systems is that wherever simplicity is added, there is corresponding complexity added elsewhere. For instance, in early PC computing, only software updates were required when the latest version was bought. Bug fixes sent to existing users were exceedingly rare, as they required physical media. With the advent of the Internet, physical media was gradually shunted to the side as bandwidth increased. Bug fixes were suddenly available to anyone who wanted to download and install them. Then came auto updating. Software began to reach out on its own to check to see if it were up to date and, if not, updated itself. Bugs were eliminated and security enhanced. In turn, this enabled rapid iteration software development and the so-called ‘fail fast’ mentality for startups and app developers. After all, if the app was flawed, a patch would simply be applied as fast as the developer could make it. Continue reading “Real Security Demands a Fundamental Change to Software Updates”


You must be logged in to post a comment.