News for hackers. Stuff that matters.

A comment on Distribution packages considered insecure. Parent comment

Re:Distribution packages considered insecure by mixedCase on Monday February 22, 2016 @06:26AM (#11150068)
Except on Arch everyone is supposed to keep updating their system at least once a day/on boot. Making security lists irrelevant as long as the packages are patched and released to the repos.

One of the reasons why you'll see most Arch users and developers recommend against using Arch for a server due to the increased maintenance burden, which on a desktop is minimal.

[ Parent | on HN ]
Re:Distribution packages considered insecure by majewsky on Monday February 22, 2016 @12:54PM (#11152737)
I wouldn't say "once a day". When I'm sick, I might not touch my PCs for a week, and that has always been fine.

The only situation where things were fucked up badly was when the system upgrade failed on a friend's notebook that was not updated for 6 months. I had to uninstall KDE in order to untangle the missing dependencies, then do the upgrade, then reinstall KDE.

[ Parent | on HN ]