[Spud] OS updates on embedded devices

Phillip Hallam-Baker <phill@hallambaker.com> Thu, 09 April 2015 21:09 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: spud@ietfa.amsl.com
Delivered-To: spud@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F4511B331C for <spud@ietfa.amsl.com>; Thu, 9 Apr 2015 14:09:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5G_L46qFhrKf for <spud@ietfa.amsl.com>; Thu, 9 Apr 2015 14:09:10 -0700 (PDT)
Received: from mail-lb0-x22f.google.com (mail-lb0-x22f.google.com [IPv6:2a00:1450:4010:c04::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C6741B3300 for <spud@ietf.org>; Thu, 9 Apr 2015 14:09:10 -0700 (PDT)
Received: by lbbuc2 with SMTP id uc2so97304919lbb.2 for <spud@ietf.org>; Thu, 09 Apr 2015 14:09:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:cc:content-type; bh=jtVEXFkFzpmYv7vZWTNBtg7dJk2ZfL12X2SHxFytUmc=; b=FcAr0oyJ7yQEjyWNyzsvzKwz0OMlmdMmV8oC5ymBVRVO10hTF3d1n4eGkrRBHgBvhB VAlv51DUW8lrCW8H5wcM098jhsfvE1rM0Jcb07kGtOowSXgNv6lQNBMejll6fqQMwzTV URtF9Os1eaPbqkb6C0JS1S0SA5nYjpMu7va7WuDnbDUy2OmNwqpTG0sLYy8Zh2mo/Mop DCNRc4G2x+TujWGN61W2WQ7PcY5lkn60Y+Yq940SpjQrYA9hkBfQ7LpvWpLnlsBIDr93 lq1HertC4/DwMU4iTRqWMzjfrJtcNFK1OhJ14ZYC+2CHhqZ1qy7N9owsNwWr4HAQHtdR Ub6A==
MIME-Version: 1.0
X-Received: by 10.152.87.162 with SMTP id az2mr6272203lab.58.1428613748685; Thu, 09 Apr 2015 14:09:08 -0700 (PDT)
Sender: hallam@gmail.com
Received: by 10.112.147.165 with HTTP; Thu, 9 Apr 2015 14:09:08 -0700 (PDT)
Date: Thu, 9 Apr 2015 17:09:08 -0400
X-Google-Sender-Auth: dtwti3ozsFZ3tdAy4ryApJ7jN98
Message-ID: <CAMm+LwgQ30qRyQufBTqFvyjTZ0GT6_jvgf0Z0yOPF8SD-N=ujg@mail.gmail.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
To: Yoav Nir <ynir.ietf@gmail.com>
Content-Type: text/plain; charset=UTF-8
Archived-At: <http://mailarchive.ietf.org/arch/msg/spud/53FixJfR5GGl3Bgd-KGDCAmdaR0>
Cc: Tom Herbert <tom@herbertland.com>, Toerless Eckert <eckert@cisco.com>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>, "spud@ietf.org" <spud@ietf.org>
Subject: [Spud] OS updates on embedded devices
X-BeenThere: spud@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Session Protocol Underneath Datagrams <spud.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spud>, <mailto:spud-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/spud/>
List-Post: <mailto:spud@ietf.org>
List-Help: <mailto:spud-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spud>, <mailto:spud-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Apr 2015 21:09:12 -0000

We are quite a way afield here. But there are very good reasons for
NOT wanting automatic updates.

Security for me means that the device does what I want it to and
nothing else. Having the system change behavior because some code
monkey decided to add some Kewl features is a security vulnerability
as far as I am concerned.

I have Sonos devices in some of the rooms. They are practically
unusable because the idiots who make the app insist on making changes
that require the already sluggish iPhone app to be updated regularly.

When I want to turn the radio on I want it to take less than a second.
Sonos is already slow. But when it asks for an update of the app,
someone has to bring the phone to me and have me enter the password to
update it. Then the device will often fail to find the app store. If
it does find it then it is another five minutes to load the new app.


If a network device did the same thing it would undoubtedly break my network.