News for hackers. Stuff that matters.
Re:How to gain code execution on hundreds of millions of peo... by pjerem on Saturday March 01, 2025 @03:13AM (#43217169)
I do agree with you but I think that unfortunately you are wrong on the job of updates. You have an idealistic vision that I share but well, it remains idealistic.

Apart from, maybe, Linux distros, neither Apple or Microsoft are providing anything to handle updates that isn’t a proprietary store with shitty rules.

For sure the rules are broken on desktop OSs but by the meantime, you still have to distribute and update your software. Should the update be automatic ? No. Should you provide an easy way to update ? I’d said that at the end it depends on if you think it’s important to provide updates to your users. But should you except your users or their OSs to somehow update your app by themselves ? Nope.

Re:How to gain code execution on hundreds of millions of peo... by cdmyrm on Saturday March 01, 2025 @03:38AM (#43217307)
This is actually precisely how package management works in Linux today... you release new versions, package maintainers package and release them, while ensuring they actually work. This is a solve problem, it's just that nobody writing JavaScript is old enough to realize it's an option.
Re:How to gain code execution on hundreds of millions of peo... by pjerem on Saturday March 01, 2025 @05:10AM (#43217823)
And that's why I said "apart for Linux". Where are the package maintainers on the OSes everyone uses ? (and don't think that's sarcasm, I'm writing this comment on my linux desktop).
Re:How to gain code execution on hundreds of millions of peo... by xrisk on Saturday March 01, 2025 @06:28AM (#43218264)
Homebrew and chocolatey?
Re:How to gain code execution on hundreds of millions of peo... by dingdingdang on Saturday March 01, 2025 @01:07PM (#43221820)
My exact thought as well, simply point the user to a well established and proper channel for auto updates and then the dev simply needs to upload/release to said repos when a new version is put out. As an aside: Chocolatey is currently the only (stable/solid) way to consistently keep things up to date on the Win platform in my book.