[Desktop_architects] Shouldn't distros and ISVs ensure that security updates get deployed promptly?

[Mike Shaver]

On 4-Feb-09, at 12:17 PM, Ritesh Raj Sarraf wrote:
> Going with your example of silent upgrades, I still have one question:
>
> I have konqueror open with 10 tabs and have no plans to close them  
> as they
> have many TODO items (I'm surviving with swsusp).
>
> A Konqueror vulnerability was discovered and was silently updated on  
> my box by
> my distro vendor. Am I not supposed to be restarting my web browser  
> for the fix
> to be effective ?

Indeed, being able to restore the user's state after a restart or  
other update-required disruption is pretty key to having users stay up- 
to-date.  Session restore might be the most significant security  
feature we've ever put in Firefox, in terms of aggregate user-exposure  
reduction.

Mike