Hello good people.
Is no one afraid of Bazzites auto updating nature (in regard to privacy/malware)?
I am myself worried about the potential for well timed supply chain attacks from wherever they build their OS images, which somehow build malicious images or just gets itself into the normal image builds and we auto update to.
Is this an unfounded worry? Does anyone know of the security measures in place to prevent attacks?
Auto update just feels weird to me, especially for something like my OS. I’m asking because I went and installed it and realised auto updating seems to be their philosophy… which is scary?
p.s. i couldnt find anyone online discussing this
Thonks
If you sleep instead of shutting down, then you don’t get updates (and it starts complaining at you after a month).
Follow me for more security tips!
deleted by creator
Thanks. I guess since I installed it fully before finding this out, I was looking for if was a silly worry to have or not before starting again with another distro.
I suppose I’ll just let it stew in my noggin before deciding if the slight extra peace of mind is worth it, even though I have disabled auto updates with their hacky (unsupported) method of marking my connection as metered (who knows if thats reliable since its unsupported).
deleted by creator
In general auto updating resolves more security concerns for the general user than the risk it gives. For those that are going to manually check updates you can turn auto updates off.
Personally, I’m not concerned at all. Its trivially easy to revert to an earlier version if there is an issue.
Soz I think my post wasn’t immediately apparent, I meant for possible malware that we auto update to (in which case reventing afterwards might already be too late)
I think we just don’t get a lot of successful supply chain attacks. And Bazzite / Fedora don’t use the AUR 😅
I am using my bazzite machine only for gaming, so worst case I need to reinstall it. I am also to lazy to check manual updates so got the same risk there
