Hi,
Dean Pierce:
> Would it be blasphemous to run some sort of software update at boot?
> Ideally some sort of very visible indicator displaying the date of the
> most recent security update would be nice too. I feel like these
> vulnerability gaps are inevitable, and trying to avoid them with
> tricky scheduling would just make release schedules overly complex,
> and even then it doesn't really help much against an adversary who
> isn't bound to such schedules.
Tails contains a mechanism that, at boot time, executes a check for
upgrades. This could be used to display warnings if there is indeed a
security issue, and has been used for this in the past.
Cheers!
u.
