Bazzite Auto Updates

dogs0n@sh.itjust.works · 2 days

Wonder why we were taught to stay away from wikipedia instead of being taught how to use it properly 🤔. Idk how to verify sources so i trust wikipedia at face value, sorry ;(

dogs0n@sh.itjust.works · 4 days

O, it looks like you can rebase to a specific version and bazzite won’t attempt auto updating in such cases: https://docs.bazzite.gg/Installing_and_Managing_Software/Updates_Rollbacks_and_Rebasing/rebase_guide/

Thank you, I think that might solve my issue if I can just periodically change my branch to the latest version and pin it there.

dogs0n@sh.itjust.works · 4 days

Thanks. I guess since I installed it fully before finding this out, I was looking for if was a silly worry to have or not before starting again with another distro.

I suppose I’ll just let it stew in my noggin before deciding if the slight extra peace of mind is worth it, even though I have disabled auto updates with their hacky (unsupported) method of marking my connection as metered (who knows if thats reliable since its unsupported).

dogs0n@sh.itjust.works · 4 days

Thanks for the answer.

That’s good to be aware of. I was also kinda put a back by a github issue raised by someone who could no longer toggle off auto updates with ujust.

It got solved by them adding the command back, just to be silently broken again by them renaming and subsequently removing it again (still removed as far as I’m aware).

Weird first impression on how quickly things are broken with no alternative.

dogs0n@sh.itjust.works · 4 days

Thanks for your answer. I have a lot of trust with Fedora, I guess I am more worried specifically about bazzites build process potentially being exploited. Sounding like I am being extra paranoid with Bazzite for maybe no reason

dogs0n@sh.itjust.works · 4 days

Soz I think my post wasn’t immediately apparent, I meant for possible malware that we auto update to (in which case reventing afterwards might already be too late)

dogs0n@sh.itjust.works · 4 days

cross-posted from: https://sh.itjust.works/post/62361303

Hello good people.

Is no one afraid of Bazzites auto updating nature?

I am myself worried about the potential for well timed supply chain attacks from wherever they build their OS images, which somehow build malicious images or just gets itself into the normal image builds and we auto update to.

Is this an unfounded worry? Does anyone know of the security measures in place to prevent attacks?

Auto update just feels weird to me, especially for something like my OS. I’m asking because I went and installed it and realised auto updating seems to be their philosophy… which is scary?

p.s. i couldnt find anyone online discussing this

Thonks

dogs0n@sh.itjust.works · 4 days

Hello good people.

Is no one afraid of Bazzites auto updating nature (in regard to privacy/malware)?

I am myself worried about the potential for well timed supply chain attacks from wherever they build their OS images, which somehow build malicious images or just gets itself into the normal image builds and we auto update to.

Is this an unfounded worry? Does anyone know of the security measures in place to prevent attacks?

Auto update just feels weird to me, especially for something like my OS. I’m asking because I went and installed it and realised auto updating seems to be their philosophy… which is scary?

p.s. i couldnt find anyone online discussing this

Thonks

dogs0n@sh.itjust.works · 6 days

I’m glad they are doing a random selection of people who sign up who can order one, way better than the first come first served model that gives all the product to bots/scalpers (like the say in their reasoning).

Price seems reasonable for what you get in this current market ;(

dogs0n@sh.itjust.works · 7 days

I think he just left to go work on fulu, no bad blood as far as i’m concerned. Anyways grayjay is pretty good, and when the new newpipe comes out that might be an even better choice maybe (but who knows when that’ll be?? Tell me).

dogs0n@sh.itjust.works · 1 month

What!! Unless your VPN is hooked up through a NASA telescope and transmits your data through space and time 70 bucks per year is a SCAMMM!!! $70 every two/three years, that makes more sense.