In reply to Carl Hancock.

If automatic or "atomic" updates could be made completely or near secure I may agree.

Windows is not a simple mechanism of updates. Many commercial applications like Adobe stuff code their own mechanisms.

Windows does an entire audit of several areas of a system before pushing updates. Its taken them years and years to get it right.

WP certainly wouldnt need something as advanced. But the problem here is Open Source. Since the mechanism by which updates are performed will be a known quantity and it is possible right now in fact to capture an "update in progress" (for example a listener application) the task becomes far more difficult than the simplicity it conceptually appears to be as is the case in much software engineering.

See... Being a programmer isnt hard as I said in another thread. I can teach anyone, I've taught 12 year olds. In comparison to marketing its simon simple.

But taking a problem or task and writing code to DO that task, that can be easy or very difficult. We all recognize say a STOP sign when driving. For a computer to visually recognize a stop sign is a TON of work.

Thats why I call them "Dumbputers" as really, they are quite stupid. An ant is infinitely more intelligent than a computer.

The best protection is informing people of problems within their website and if need be make it VERY in their face so they respond to it.

If Webmasters only use WP from the frontend (I dont see how they could NEVER enter the backend) then when the Admin account logs in they get a big official WP notification telling them "You have a security problem" as well as at the email address of the Admin.

I have not in any way shape or form looked at the codebase of how WP currently does its updating so I cannot say if IMHO its satisfactory or not, again, in my opinion. I simply do not know.

Whilst I am not new to WP having built some sites I am new to the coding thereof. Much more experienced with Joomla which we are doing everything we can to transition away from as well.