2026-01-25 23:23 UTC
Replies (3)
-
@Em0nM4stodon@infosec.exchange 2026-01-25 23:33
@Aurimas@androiddev.social It really depends on each piece of software and the type of data it handles.
-
@bob_zim@infosec.exchange 2026-01-25 23:48
@Aurimas@androiddev.social @Em0nM4stodon@infosec.exchange What’s most irritating about this to me is companies which ship security-only updates, but only to weird versions of the product. For example, Microsoft has LTSC versions of Windows (e.g, Windows 11 IoT Enterprise LTSC) which get security updates at the same time as the mainstream versions for *ten years*, and they don’t get any feature updates! They’re already doing the work of porting fixes around, they just don’t let the mainstream versions take advantage of it.
-
@dalias@hachyderm.io 2026-01-27 14:10
@Aurimas@androiddev.social @Em0nM4stodon@infosec.exchange The model is to have absolutely zero attack surface in the parts you interact with so that there is NEVER a mandate to update them.