this post was submitted on 28 Feb 2024
833 points (97.3% liked)

linuxmemes

20870 readers
1057 users here now

I use Arch btw


Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] 1984@lemmy.today 66 points 7 months ago (41 children)

I work at a medium size company with hundreds of Linux servers and none of them get updated. Because it's more important that they keep running as they are than to have the latest updates. I bet this is very common for most companies.

[–] bushvin@lemmy.world 86 points 7 months ago (28 children)

There is nothing more important than security patches on a system.

I used to work at an FMI, which’s motto was “keep things stable”. Even the ciso department bought that crap. Until we hired a white hat hacker. The only thing given was the name of the company. He managed to get into the building, access an employee’s workstation and install a root kit on one of the most important financial message tracking systems (you know, the one that instructs other systems to transfer money), using a security bug, which would have been patched if they kept a regular (security) update cycle. After shit hit the fan, many people were fired and an update cycle was introduced.

No system is important enough to not patch. And if you believe it is, you’re wrong.

[–] 0x4E4F@lemmy.dbzer0.com 9 points 7 months ago* (last edited 7 months ago) (27 children)

Yeah, but that just takes way too much work. You think I really care about the company's/bank's money if I'm not getting paid enough for that job? Security patches can also introduce new problems, like x changes, so y doesn't work, so the main app doesn't work... and what, then I have to manually edit code, introduce the thing that x relied on so that y can work again?

I'm sorry, but this is not your average IT department's job... or if it is, I expect a damn good compensation for it.

I've updated and rolled back snapshots because of shit like this... nah, not gonna try and figure out what the problem was... at least not for the salary I'm currently getting paid. If it burns, it burns, so be it.

[–] min_fapper@iusearchlinux.fyi 17 points 7 months ago (1 children)

God I hope I don't use any products from your company.

[–] 0x4E4F@lemmy.dbzer0.com 1 points 7 months ago

They make multimedia, so you've probably "used" it at some point... or not... depends how much TV you watch.

load more comments (25 replies)
load more comments (25 replies)
load more comments (37 replies)