Automatic Software Updates: Blessing or Curse?

All of my students will know by disdain for Micro$oft updates. Expecially when they interfere with my day's work!!! I also have disdain for Micro$oft "taking over my computer (yes, it is my property, I paid for it, I own it!!!). I want to decide for myself what I run. Enough said.

More and more devices that we use every day that were once dumb machines now come with embedded computers and software that is often set to update automatically over the Internet. Televisions, toasters, refrigerators, automobiles, ovens, DVR's--even speakers, light bulbs, and toothbrushes. Seemingly, whatever a manufacturer can possibly stuff a computer into is now fair game. And we are told that we must update our software constantly, because ransomware gangs and other criminals are prowling every IP address on the Internet looking for vulnerable devices to pry their way into. If manufacturers stop updating a device's software, we are told to throw it away and buy another--usually another that is even more expensive. The vast majority of us have no possible way of knowing whether the new device is actually any more secure than the old device, but many of us throw down our hard-earned money and hope for the best. Of course, the same scenario applies to traditional computing devices like routers and personal computers.

One of the many problems associated with the paradigm of keeping our devices updated for maximum security is that new versions of software often have new bugs and security flaws. Sometimes these bugs even render devices inoperable. Except in clear cases of neglect or fraud, manufacturers cannot be held legally responsible for anything their bad software does, so they have little financial incentive to insure that it is functional. In fact, one could argue that the incentive is to provide software that bricks devices or renders them virtually useless, so customers are forced to buy new ones.

One may point to multiple examples in which bad software updates have led to great inconvenience for their owners. One was highlighted by Apple's 113 million court settlement in 2020 over iOS updates that slowed the operation the iPhone 7 and 6S. In fact, the slowdown was so severe that some customers felt the need to buy new iPhones. Another event occurred in 2019 when a Chinese NIO electric automobile stopped in traffic and imprisoned its occupant for over an hour after it was disabled by an over-the-air software update. At least one Lucid Air EV was also disabled the same way in 2022. Windows users are very familiar with reports over the years of certain Windows updates breaking users' computers. And finally, a recent automatic update of firmware that was designed to prevent the use of third-party ink "rendered some models of HP OfficeJet printers useless for weeks". Customers were forced to mail their printers back to HP for repairs.

I would argue that numerous examples of automatic updates bricking devices or reducing their functionality suggests that consumers should carefully consider whether the risk of automatic updates are really worth the rewards. Whenever possible, I prefer to apply updates manually and only after others have already updated their devices and verified that they are working properly. One example of when this advice could have been useful was when a friend's Internet-connected Blue-Ray DVD player died very suspiciously on the exact day that two of her friends' DVD players of the same model also died. Had manual updates been possible, my friend could have simply chosen not to update the firmware of a device that was already functioning satisfactorily. If she had decided to update, at least she would have been relatively confident that the update had caused the problem. And, perhaps she would then have been more motivated to look for a solution other than simply buying a new DVD player.

Rather that setting all software updates to occur automatically, better advice may be for consumers to pay attention to the reputations of their devices' manufacturers and be more diligent about knowing when software updates are available and whether they are safe to apply. I know this requires effort, but is avoiding the possibility of being forced to quickly replace a critical piece of equipment, like a router or home-office computer, worth the inconvenience? Of course, having backup devices in case critical primaries fail is also a good practice.

If you have found this article worthwhile, please share it on your favorite social media. You will find sharing links at the top of the page.