There's an awkward tension between auto-update and fixing security bugs. If platforms don't automatically update, users don't get security fixes. If they do update, you're giving the vendor RCE power.
miniblog.
Related Posts
Looking at how my servers update themselves and the recent Copy Fail vulnerability, I'm considering an automated weekly restart to make sure services and kernels are up to date. It'd also ensure that services are correctly configured to start on boot.
Any thoughts? Feels crude.
I've released difftastic 0.68! A smaller update, but still worth upgrading:
* Improved Bash, C, Go, Lua, Nix, Perl, Python, Rust, Scala, Swift and YAML parsing.
* Minor display and git compatibility fixes.
I made some changes to a node express project that I haven't touched in almost five years. I was pleasantly surprised that I only needed to update one dependency to get it working again!
(It was sqlite3, which is a native dependency using node-gyp.)