1

00:00:01,716  -->  00:00:05,541
Installing security updates and
automating your security updates

2

00:00:05,542  -->  00:00:08,472
is an extremely good
idea for security

3

00:00:08,734  -->  00:00:10,290
as we've already discussed.

4

00:00:10,567  -->  00:00:14,545
But it is not necessarily compatible
with your privacy

5

00:00:14,618  -->  00:00:15,752
and anonymity.

6

00:00:16,036  -->  00:00:19,149
This is especially true
with Microsoft and Apple,

7

00:00:19,330  -->  00:00:22,509
and other operating systems where
there is a money trail back

8

00:00:22,654  -->  00:00:24,500
to the operating system purchaser.

9

00:00:24,909  -->  00:00:27,265
Windows 10 is not
an operating system

10

00:00:27,345  -->  00:00:29,970
for high levels of privacy
or anonymity.

11

00:00:30,240  -->  00:00:32,712
Windows 8 and 7
are a little better.

12

00:00:33,578  -->  00:00:36,240
To maintain a degree of
privacy and anonymity

13

00:00:36,298  -->  00:00:38,807
you should update using
an anonymizing service

14

00:00:38,808  -->  00:00:41,170
like a VPN, Tor, JonDonym,

15

00:00:41,432  -->  00:00:43,505
which we’ll discuss
in more detail later.

16

00:00:43,912  -->  00:00:45,532
This way when you're doing
updates,

17

00:00:45,533  -->  00:00:49,461
it doesn't tie you to a physical
location or an IP address.

18

00:00:50,203  -->  00:00:52,101
Also you need to consider
the fact that

19

00:00:52,334  -->  00:00:54,785
updates can be malicious.

20

00:00:55,054  -->  00:00:57,920
For example, the IOS
update mechanism

21

00:00:58,130  -->  00:00:59,498
is device specific.

22

00:00:59,694  -->  00:01:02,792
If Apple was forced or chose to,

23

00:01:03,025  -->  00:01:06,501
could send a malicious update,
to a specific user.

24

00:01:06,821  -->  00:01:09,454
How all the individual update
mechanisms work

25

00:01:09,563  -->  00:01:11,338
per iOS, I don't know,

26

00:01:11,680  -->  00:01:14,981
but it is a possible attack vector,
your updates,

27

00:01:15,265  -->  00:01:18,923
and it will be a particularly useful
tool if that update mechanism

28

00:01:19,010  -->  00:01:21,280
could be sent to
a specific user.

29

00:01:21,527  -->  00:01:22,527
Something to think about.

30

00:01:22,894  -->  00:01:26,850
You're safer when using free or
open source operating systems

31

00:01:27,098  -->  00:01:29,054
that have no money
trail back to you

32

00:01:29,323  -->  00:01:30,814
as they have no understanding

33

00:01:30,865  -->  00:01:33,047
of who the operating
system user is.

34

00:01:33,207  -->  00:01:35,338
Security updates
are very important,

35

00:01:35,520  -->  00:01:37,941
but just be aware of
the potential privacy

36

00:01:38,036  -->  00:01:41,323
and anonymity concerns when
installing those updates.