Moode Update Policy and resulting Security

[the_bertrum]

We can't say it is safe, just because it is inside our own network. That`s really misleading!

I didn't quite say that, I said inside your network which you have secured.  The safety comes from securing the perimeter properly.

This would mean, that we never need to update our browser, because he is running on our local machine in our own network? No!

That is a useless comparison.

What I want to say, it is easy to fix this problem - one example is on Debian Package Management is is possible to mark modified packages - so we can set them on hold.

But, marking packages as hold prevents them from updating, and so would leave any vulnerability unpatched, so you gain nothing.

I understand that is easy for u to support this construct, when u just say, "pls reimage the sd card" - but at this point a user have maybe put a lot of effort in the setup.

There is a fine settings backup utility in moOde that takes this issue away.

But in the end, the creators of moOde must see the need to improve this masterpiece to make it more stable and, above all, safer.

Thomas

You seem to have a lot of knowledge in this area, I'm sure that if you applied some of that to resolving the issues you see and submitting a pull request the repository your efforts would be welcomed.  This is proper Open Source after all, anyone can contribute.