On 9/5/2013 9:43 AM, Jim Thompson wrote: > > On Sep 5, 2013, at 7:57 AM, Jim Pingle <[email protected]> wrote: > >> But it doesn't matter if the vendors issue a patch, people actually have >> to install the update to fix it, and odds are high that typical end >> users have no idea that is even possible or something they have to do. > > This speaks to a service that keeps the software updated.
Cisco/Linksys caught a lot of flack for doing that[1][2]. Shipping with an auto-update flag on can be unexpected and dangerous, but if it's shipped off, it would probably never be turned on by those who need it most. For many end users it does make sense, but then again that's also yet another channel that can be exploited to compromise the router, too. Jim [1] http://www.zdnet.com/cisco-connect-cloud-chaos-7000000282/ [2] http://www.computerworld.com/s/article/9228687/Linksys_firmware_upgrade_for_Wi_Fi_routers_angers_some_users _______________________________________________ List mailing list [email protected] http://lists.pfsense.org/mailman/listinfo/list
