264 karma · joined June 17, 2020
Yes, I think you are totally right. I'm sure Linux would never be so big as it is without a maintainer that talks so professional than Linus Torvalds.
...because I'm that I'm writing this article be a AI himself...
BUT, there is no documentation because there is no time to do it. There are SOP-1(Start of Production). This date is carved in stone. When a feature is not done for SOP-1, than it is not delivered in SOP-2. SOP-2 happens normally 6 month later. After that, updates are only done when something bad happens. The complete team moves on to the next head unit.
So, I would expect your bugs will not get fixed in any way, at least when they are not important enough to mobilize a new small team or some people that worked on it to fix them. Normally shortly before SOP-2, all tickets are closed, known bugs too. That feels a little frustrating as customer, but more as developer.
Oh, and don't think that you can run away from that by buing another brand. Normally not your car manufacturer develops the head unit. It's other companies and they work all the same and they work for all car companies.
The biggest attack vectors are the browser, the mail client and direct network access. I would never use outlook, edge or connect my computer directly without NAT or firewall to the open internet. And would never open a website without a add blocker.
You can count all other known big attacks(on unpatched Windows 7!!!) on one hand.
1) Remote execution via Wifi Stack
2) Remote execution via True Type Fonts
3) 0-Click code execution via USB Stick Icon processing
Windows update instead gives AT LEAST Microsoft a steady remote code execution on your and millions of other computers. It's a really interesting attack target when you go big. Why I should trust M$ to get the security there right?
When the last bastion of Windows, the driver support is falling, I can switch to Linux. Since 2 month I use openSuse on this device and be happy. No running fan, no problems. Windows is dying.
How could you do a clean system reset after someone had access to all installed software/data including the cryptographic keys? The information is gone, maybe the recovery partition is changed. How could you securely recover?