# Am I right to be paranoid about automatic updates? **URL:** \ **Category:** Factual Questions\ **Created:** [March 2, 2012, 1:55pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546 "2012-03-02T13:55:26Z")\ **Posts on this page:** 10\ **Page:** 3
**Author:** ![MsWhatsit](https://avatars.discourse-cdn.com/v4/letter/m/eb8c5e/32.png) [@MsWhatsit](https://boards.straightdope.com/u/MsWhatsit)\ **Post date:** [March 4, 2012, 11:47pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/41 "2012-03-04T23:47:00Z")
> [@TBG](#): > > First thing I do when I install an OS is turn updates off. Completely off. I also don’t update them manually. And yet my systems still are just fine without supposed “critical security updates”, go figure. “My uncle smoked 10 packs a day and lived to be 100, go figure.” ---
**Author:** ![Sudden\_Kestrel](https://avatars.discourse-cdn.com/v4/letter/s/ecd19e/32.png) [@Sudden\_Kestrel](https://boards.straightdope.com/u/Sudden_Kestrel)\ **Post date:** [March 5, 2012, 3:47am UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/42 "2012-03-05T03:47:24Z")
> [@Fear\_Itself](#): > > I would if it had free porn. You made me laugh out loud and wake up my husband, dammit. 😃 ---
**Author:** ![Jragon](https://avatars.discourse-cdn.com/v4/letter/j/e19b73/32.png) [@Jragon](https://boards.straightdope.com/u/Jragon)\ **Post date:** [March 5, 2012, 4:05am UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/43 "2012-03-05T04:05:27Z")
> [@MsWhatsit](#): > > “My uncle smoked 10 packs a day and lived to be 100, go figure.” Not exactly apt, but pretty close. It is possible with good browsing and email habits to minimize the risk of getting malware (or hacked), but just like you can avoid getting sick by avoiding large crowds of people, there’s always a chance that somebody you come in contact with gets it. Sites get hacked, high profile video game websites have gotten malware uploaded on them by sneaky hackers. Granted, getting virus programs is still just “minimizing” you can never eliminate it, but I think as much as good browsing habits brings it down, security updates, antivirus software etc help a lot more. ETA: I personally set all my programs up to just notify, for the reasons given above about being in the middle of a program when your computer automatically reboots (or minimizes your application every 10 minutes to tell you it needs to reboot). ---
**Author:** ![Mean\_Mr.Mustard](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mean_mr.mustard/32/3865_2.png) [@Mean\_Mr.Mustard](https://boards.straightdope.com/u/Mean_Mr.Mustard)\ **Post date:** [March 5, 2012, 12:42pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/44 "2012-03-05T12:42:20Z")
> [@Jragon](#): > > I personally set all my programs up to just notify, for the reasons given above about being in the middle of a program when your computer automatically reboots (or minimizes your application every 10 minutes to tell you it needs to reboot). I set mine to update every day at 0300 for this reason. mmm ---
**Author:** ![Simple\_Mind](https://avatars.discourse-cdn.com/v4/letter/s/7cd45c/32.png) [@Simple\_Mind](https://boards.straightdope.com/u/Simple_Mind)\ **Post date:** [March 5, 2012, 12:53pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/45 "2012-03-05T12:53:18Z")
Ok, “Francis Vaughan”, I like your comparison a lot, so I thought some more and came up with the idea to copy all your software installation disks to your HD and then have a program that monitors all your running applications and check’s them against the data from the installation disk. So when windows for example develops an error, it simply gets the healthy file from the HD and repairs the damage. Would something like this work? I could imagine that there is no problem with disk space this days… ---
**Author:** ![Alka\_Seltzer](https://avatars.discourse-cdn.com/v4/letter/a/c89c15/32.png) [@Alka\_Seltzer](https://boards.straightdope.com/u/Alka_Seltzer)\ **Post date:** [March 5, 2012, 1:37pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/46 "2012-03-05T13:37:04Z")
> [@Simple\_Mind](#): > > So when windows for example develops an error, > it simply gets the healthy file from the HD and repairs the damage. Would something like this work? It wouldn’t work, there are often dependencies between program files. ---
**Author:** ![GiantRat](https://avatars.discourse-cdn.com/v4/letter/g/e47c2d/32.png) [@GiantRat](https://boards.straightdope.com/u/GiantRat)\ **Post date:** [March 5, 2012, 1:38pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/47 "2012-03-05T13:38:21Z")
> [@Procrustus](#): > > I’m uncomfortable with a computer acting without direction from me. It’s like it’s alive or something. You must keep rather busy updating file indices, monitoring CPU temp and adjusting fan speeds. And refreshing the dispay 60 times/second. 😃 ---
**Author:** ![Alka\_Seltzer](https://avatars.discourse-cdn.com/v4/letter/a/c89c15/32.png) [@Alka\_Seltzer](https://boards.straightdope.com/u/Alka_Seltzer)\ **Post date:** [March 5, 2012, 2:02pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/48 "2012-03-05T14:02:17Z")
> [@TBG](#): > > First thing I do when I install an OS is turn updates off. Completely off. I also don’t update them manually. And yet my systems still are just fine without supposed “critical security updates”, go figure. So, how do you know you PC isn’t part of a [botnet](http://en.wikipedia.org/wiki/Botnet)? Some of them contain a few million machines. For example, the [conficker](http://en.wikipedia.org/wiki/Conficker) worm exploits a flaw in the Windows [server service](http://technet.microsoft.com/en-us/security/bulletin/ms08-067). ---
**Author:** ![Francis\_Vaughan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/francis_vaughan/32/3093_2.png) [@Francis\_Vaughan](https://boards.straightdope.com/u/Francis_Vaughan)\ **Post date:** [March 5, 2012, 2:54pm UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/49 "2012-03-05T14:54:02Z")
> [@Simple\_Mind](#): > > … so I thought some more and came up with the idea to copy all your software installation disks to your HD and then have a program that monitors all your running applications and check’s them against the data from the installation disk. So when windows for example develops an error, > it simply gets the healthy file from the HD and repairs the damage. Would something like this work? There are two parts to the answer here. In terms of monitoring the computer system for corruption - and this includes malicious corruption or modification - such systems are already in use - at least up to a point. Many virus checkers, or system integrity checkers will calculate essentially unforgeable signatures for all the critical files, and will sweep over the system periodically looking for files whose signature has changed, and flag the issue. Automatic repair is an easy next step. But as noted above, not all files are static. Some system files change of necessity, and you can’t manage damage to those this way. However the deeper issue is I think where the concept of “flawless software” comes in. My examples earlier were probably slightly misleading, in that the examples were of damage incurred after crafting the car or plane. With software that isn’t the issue. The flaw is in the created artefact. So it is as if the plane was designed, or the manufacturing process was such that, the rivet would never be installed tight, or the car was designed so that there was always a slight flaw in the bodywork. With either the car or plane it simply doesn’t matter. But with software that slight flaw in design can turn into total system failure or security breach. It may not as well. Cars do get recalled for sometimes apparently trivial, but possibly important safety issues. For example mine has a recall notice on it because the gasket used on the brake master cylinder is made of a material that tests have shown, that if you use an inferior brake fluid, over many years, the gasket may harden. If you use a quality fluid (get the car serviced with the dealer for instance) the problem will never arise. But there is a recall on it, and they will replace the gasket. You can imagine that, just maybe, somewhere on the planet, all the stars align for some poor owner, and they get killed because the gasket failed at exactly the wrong moment. The problem with software and security is that once the black hats work out what it takes to align those stars, they align on demand for every owner of the software. Overnight every one of millions of computers becomes vulnerable. Yet it could be from something as apparently trivial as the equivalent of a poorly fitting rivet. ---
**Author:** ![Simple\_Mind](https://avatars.discourse-cdn.com/v4/letter/s/7cd45c/32.png) [@Simple\_Mind](https://boards.straightdope.com/u/Simple_Mind)\ **Post date:** [March 6, 2012, 1:44am UTC](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546/50 "2012-03-06T01:44:07Z")
Thanks for that bit too… [Previous page](https://boards.straightdope.com/t/am-i-right-to-be-paranoid-about-automatic-updates/614546.md?page=2)