Hello good people.

Is no one afraid of Bazzites auto updating nature (in regard to privacy/malware)?

I am myself worried about the potential for well timed supply chain attacks from wherever they build their OS images, which somehow build malicious images or just gets itself into the normal image builds and we auto update to.

Is this an unfounded worry? Does anyone know of the security measures in place to prevent attacks?

Auto update just feels weird to me, especially for something like my OS. I’m asking because I went and installed it and realised auto updating seems to be their philosophy… which is scary?

p.s. i couldnt find anyone online discussing this

Thonks

  • dogs0n@sh.itjust.worksOPEnglish
    0·
    10 days ago

    Thanks. I guess since I installed it fully before finding this out, I was looking for if was a silly worry to have or not before starting again with another distro.

    I suppose I’ll just let it stew in my noggin before deciding if the slight extra peace of mind is worth it, even though I have disabled auto updates with their hacky (unsupported) method of marking my connection as metered (who knows if thats reliable since its unsupported).

    • A Sharky Anthro@fedia.io
      0·
      10 days ago

      Yeah, that is why I read everything before deciding on installing anything. As a user, if you trust a distro enough to install it directly, you have to be aware of all it’s features first. Yeah, personally I wouldn’t keep an unsupported feature enabled for any length of time, that is just asking for a preventable breakage (though easier to rollback with Bazzite or any distro with Snapshots).

      If it does bother you enough, it might warrant a distro change…I still say it’s not a huge deal. The atomic nature of Bazzite is one of its greatest strengths as there are inherent security advantages. Nothing is absolutely immune to cyberattacks or malware (as there are numerous paths to exploit) but immutable distros are a good and solid thing!