←back to thread

286 points joegibbs | 4 comments | | HN request time: 0.908s | source
Show context
arcticbull ◴[] No.42143642[source]
Periodic reboots are actually a PCI requirement for payment terminals heh, basically every point of sale on the market reboots every 24h.
replies(5): >>42143696 #>>42143718 #>>42143892 #>>42144077 #>>42144547 #
Gigachad ◴[] No.42143696[source]
Seems like a good defence in depth strategy. These days most systems have a pretty good boot chain security, so after a reboot you know the system is in a valid state and any potential malicious changes have been flushed out.
replies(5): >>42144335 #>>42144436 #>>42144554 #>>42144910 #>>42147261 #
bugtodiffer ◴[] No.42144910[source]
This is so damn sad. I don't fully get why I have to reboot after kernel updates but accept it, but just every 3 days? Why?
replies(2): >>42145164 #>>42145453 #
1. saagarjha ◴[] No.42145453[source]
How do you expect to swap out your kernel without restarting your machine?
replies(1): >>42145552 #
2. sintax ◴[] No.42145552[source]
Don't know about apple, but on linux you can live patch a running kernel with security updates (kpatch/ksplice/...).
replies(1): >>42145615 #
3. saagarjha ◴[] No.42145615[source]
Right, which means that an attacker can trick your kernel into patching itself to do something malicious.
replies(1): >>42145743 #
4. dizhn ◴[] No.42145743{3}[source]
And automatic periodical reboots give hackers the piece they were missing. :)