28 June 2008

Trusting the source

I keep track of security issues for various different parts of my OS just so I can react when there is a problem and warn others of potential problems. I find it very reassuring that I can see a security report with an explanation of where the flaw arises and even look myself or test to see that in fact there is a hole. Usually within hours I can sudo apt-get update and see that there is a fix waiting right there as an update. I can check and see if it fixes the problem and even look at diffs to see what was changed.

The thing that scares me and the reason I have quit using Windows, except as a last resort, is the fact that they have these updates and they never (really ) tell you why it is being updated ( or downgraded or manipulated ) as the case may be and they can be doing it for numerous reasons.

  1. Disable or manipulate a competitors product.
  2. Disable an open source application that competes.
  3. Reduce your security.
  4. Steal some information.
  5. Slow the OS so that you are pushed to upgrade.
  6. Gather customer information to sell.
I am a trusting person, but that varies with who I am dealing with. I am aware that they have done this in the past and I have actually seen the code itself. I really don't like running Windows at all any more, it makes me uncomfortable and when I see that updates are available it always irritates me because they want to use my machine for their purposes, without my consent and they don't give you the option to know if it is really for security reasons or for their purposes. They can't be trusted is what bothers me and when I am forced to deal with them it makes me unhappy.

No comments: