The below is a duplicate from discourse (I suggest to focus the
discussion there):
https://discussion.fedoraproject.org/t/potential-security-issue-for-beginners-non-experts-when-release-is-end-of-life-fedora-doesnt-consider-the-behavior-of-beginners-non-experts-sufficiently/87311/1
I just became aware of another topic from a user who elaborates their
problem and “by the way” mentions to use Fedora 35. The user provides
this information in order to give an overview of his system
configuration and thus does not consider this as part of the problem.
I have seen many of these topics over time, and I guess there are many
more users out there who use obsoleted Fedora releases (the less
experienced they are, the more they are likely to end up with obsoleted
releases, and the less likely they are to end up on ask.fedora so that
we can make them aware).
We officially want to make Fedora usable for average users (or
beginners), but many (if not most) average users deploy their systems in
a “fire and forget” manner: once they made it work, they maybe enable
updates and such and then they no longer care if everything *seems* to
work fine.
I assume that many of these users are not aware that they no longer
receive updates, which can be dangerous.
First of all, I don’t use my Fedora installations until their /end of
life/, so I don’t know if we have any means in place that shall make
users aware once their release reaches /end of life/?
*If not*, does it make sense to add some means?
If we promote Fedora for average users/beginners, we have to also
consider their behavior.
On one hand, it would be cool to make them a month or two before /end of
life/ aware with a warning message that automatically forwards them to
the GUI upgrade with a click and also allows them to click “warn me
again tomorrow” or such.
On the other hand, more easy to implement solutions like that of Tails
could be sufficient solutions, too: once the Tails ISO image is started
(live system) and online, it checks if there are new images available.
If so, it opens a warning window that makes the user aware that this
image should no longer be used and shows a link and a short elaboration
of how to get the new one.
Of course there are alternatives, too. Even an apparent bullet point on
getfedora.org <http://getfedora.org> would be a good first step (we
could link it to Fedora being always up to date with most modern
technologies, to link it to something positive). In either case, I think
a short discussion of this makes sense.
This also applies to all Spins.
Best,
Chris
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue