If all they ever use it for is internet, and email within their browser, why would that matter to them?
My parents turn their computer on maybe once a week? They sit down, use the browser to pay bills, maybe answer an email, then turn it off. They have not installed anything for years. They would virtually never run into something forcing them to update. Hell, they wouldn’t even know if their browser was out of date.
Hackers discover new vulnerabilities in old software every year. The moment an E-mail comes in that uses an E-mail exploit that hiijacks the domain for their bill payment site, they get screwed. Even if they don’t have anything worth stealing, hackers may then use their relatively unused computer as a bot in their global botnets. 1 million of those users, and it can be used to, say, DDOS Lemmy.
The only time it’s okay to give up on updates is if your computer is never connected to the internet.
I don’t understand your sentence. Who is talking about intentionally installing any software?
I am not referring to them opening an E-mail and reading a request to “Please install this important but suspicious package”. I’m talking about them opening a strange but possibly normal E-mail, and BAM - the content of the message abuses a Z-Sort Address Buffer Exploit invented in the year 2018, patched in the year 2018 by Windows, but not downloaded by them, ever. This exploit then remotely installs whatever without them ever knowing. Even if they never put useful information in that computer, they’re at least part of a botnet that victimizes DDOS targets.
Installing relevant dependencies is part of package installation. I mean the installation is initiated by user, he doesn’t really care how many packages will be installed.
What’s bothering people is when user is being forced to update when user didn’t have the intent to do it.
I’m pretty sure that without updating to a decently recent version, you can’t install any new packages on some Linux distros.
If all they ever use it for is internet, and email within their browser, why would that matter to them?
My parents turn their computer on maybe once a week? They sit down, use the browser to pay bills, maybe answer an email, then turn it off. They have not installed anything for years. They would virtually never run into something forcing them to update. Hell, they wouldn’t even know if their browser was out of date.
Because internet.
Hackers discover new vulnerabilities in old software every year. The moment an E-mail comes in that uses an E-mail exploit that hiijacks the domain for their bill payment site, they get screwed. Even if they don’t have anything worth stealing, hackers may then use their relatively unused computer as a bot in their global botnets. 1 million of those users, and it can be used to, say, DDOS Lemmy.
The only time it’s okay to give up on updates is if your computer is never connected to the internet.
You’re missing my point. Why would they care about not being able to install any new software when they don’t install new software as is.
I don’t understand your sentence. Who is talking about intentionally installing any software?
I am not referring to them opening an E-mail and reading a request to “Please install this important but suspicious package”. I’m talking about them opening a strange but possibly normal E-mail, and BAM - the content of the message abuses a Z-Sort Address Buffer Exploit invented in the year 2018, patched in the year 2018 by Windows, but not downloaded by them, ever. This exploit then remotely installs whatever without them ever knowing. Even if they never put useful information in that computer, they’re at least part of a botnet that victimizes DDOS targets.
Read the thread back, the sentence makes sense with context. You’re arguing the same thing I am.
My apologies. I think I overread the statement of “all they use it for is internet and email”, a line often used to justify never updating a computer.
I’m basically with you. The most popular operating system in the world, whatever it is at the time, should force automatic updates.
Installing relevant dependencies is part of package installation. I mean the installation is initiated by user, he doesn’t really care how many packages will be installed.
What’s bothering people is when user is being forced to update when user didn’t have the intent to do it.
Intent/consent, what’s the difference?
Also /s