Post #2336173

2026-05-08 10:53 UTC

@reijomancer@defcon.social my old iPhone (which I don't even use as a phone, but as a camera because I already have it so therefore it makes financial sense for now) updated overnight and I am FURIOUS about it! "Never fucking update unless compelled to" is...... what I wish my things would do because I always hate the updates. UGH. What a world. I'm just starting to learn computer science skills (so I definitely don't have the skills to do my own patches yet LOL) but how do you set things up to let you do your own updates? In my (admittedly so limited it's not even useful yet) understanding, you can only do your own patches on things that are open source? Am I understanding that incorrectly?

Replies (1)

@reijomancer@defcon.social 2026-05-08 18:33

@kira_unlimited@defcon.social Can not recommend, but: * block all of the DNS domains that handle updates for windows, apple, etc. * turn off auto-update everywhere * find anti-nag enterprise policies for the things that can't be silenced about updating (Firefox, Apple OS, Chrome) * practice ridiculous defense-in-depth at the network, host and service level. Service accounts at home, rootless containers, least-privilege networks and admin logins that are not used unless glass is broken. * stay somewhat abreast of your personal network's outbound traffic patterns * become responsible for all the devices in your house, even if you aren't the primary user. * When an applicable security update comes out, unblock everything, patch and lock it down again. Please note, this causes (-1) points sanity on your system engineer over time, cumulative per year.

Open ##2336174