[Bug 158715] Periodically call home to check for need for update due to security vulnerability

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=158715

--- Comment #24 from Eyal Rozenberg <eyalroz1 at gmx.com> ---
(In reply to Rene Engelhard from comment #22)
> Then you do it wrong.

I do the default thing on Devuan / Debian.

> There is definitely software doing so. (I don't know
> which one exact since I don't since a daily routine here is apt update &&
> apt upgrade).

Rene, I believe you are approaching this the wrong way. If you're talking about
it to a single person (like me) then you can say: "Just do XYZ", and assume I
am capable of it and am making a conscious choice. With masses of users, it
just doesn't work that way. If I dug a pit in the road and put up a sign saying
"beware the pit", people would fall in. It will not help that I can say "oh,
but they should have read the sign, it was very clear". They still fall in the
pit, and we want them not to fall in the pit.

> Your security-announcement list of your distro also is a choice, then you
> get even emailed when a package gets updated for security.

It's effectively a choice if you're offered it. The installer doesn't offer it.
Plus, again, you're thinking about security-conscious user who takes the time
to read such mailing lists. Many users aren't.

> And if you only have security updates configured for your distro you can
> assume any update == urgent. 

But if I don't, then I can't.

-- 
You are receiving this mail because:
You are on the CC list for the bug.