How often do you actually log on to your machine - hit sudo apt-get update; sudo apt-get upgrade without reading what the changes are? I do it every time, unless it's a dist-upgrade we're talking about. So how do we get this going? The tool you're looking for is called cron-apt …