News for hackers. Stuff that matters.

A comment on Firefox/Normandy/PreferenceRollout. Parent comment

Re:Firefox/Normandy/PreferenceRollout by zzzcpan on Saturday May 04, 2019 @08:48AM (#19826087)
Vendor controlled auto-update is worse than SaaS. It's effectively a control over your machine. Your entire security depends on a random employee of a random organization you entrusted with this control to not get compromised, not compelled by the government, not made shady deals with other parties to ship a backdoor to you.

But if speaking about the issue. Why Mozilla even need so much control over extensions? Seems like they built an infrastructure to be able to disable any installed extension remotely. That's just evil.

[ Parent | on HN ]
Re:Firefox/Normandy/PreferenceRollout by orbital-decay on Saturday May 04, 2019 @11:05AM (#19826862)
> Your entire security depends on a random employee of a random organization you entrusted with this control to not get compromised, not compelled by the government, not made shady deals with other parties to ship a backdoor to you.

As opposed to what? How do you test for all that with manual updates, as an individual or a small organization? Even for a huge organization which reviews most of the updates it installs, critical updates should be applied immediately, to avoid the lag.

[ Parent | on HN ]