2016-02-22 UTC
#
aaronpk it's a tough one though. either you give the software write permissions to itself, which then means attackers have a higher chance of getting their bad software onto the machine, or you make it take a manual step that the user has to do to update the software so that it can't be attacked that way
![](https://chat.indieweb.org/img.php?url=https%3A%2F%2Faaronparecki.com%2Fimages%2Faaronpk-128.jpg&sig=fcc92d9a2a2192cebb3e92cd1bf91bd7b844f7ef87301cbe5d35b9847b0d0ae0)