Comment 4 for bug 386466

Revision history for this message
Simon Bohlin (simon-bohlin) wrote :

There is a further problem with Update Manager being interactive by default. Users learn to click to allow and install, filling in superuser passwords, and one day (*) somebody will just create a fake update manager to steal superuser passwords and make ubuntu-zombies. There are several ways a fake Update Manager could get on my machine; starting with scripts or console commands that the user would get via chat or support forums as a "solution" to some driver question or similar.

(*) search comments of http://ask.slashdot.org/story/09/12/01/0025213/Ethics-of-Releasing-Non-Malicious-Linux-Malware