Post #2336174

@kira_unlimited@defcon.social Can not recommend, but: * block all of the DNS domains that handle updates for windows, apple, etc. * turn off auto-update everywhere * find anti-nag enterprise policies for the things that can't be silenced about updating (Firefox, Apple OS, Chrome) * practice ridiculous defense-in-depth at the network, host and service level. Service accounts at home, rootless containers, least-privilege networks and admin logins that are not used unless glass is broken. * stay somewhat abreast of your personal network's outbound traffic patterns * become responsible for all the devices in your house, even if you aren't the primary user. * When an applicable security update comes out, unblock everything, patch and lock it down again. Please note, this causes (-1) points sanity on your system engineer over time, cumulative per year.