Some perspective for the timeline..
Posted Oct 17, 2006 7:15 UTC (Tue) by nhippi
In reply to: Write to NVIDIA
Parent article: Local root exploit in NVidia driver
> The shoker is the length of time it's taken for this problem to be realy made public. The issue has been around since 2004 and it wasn't until July 2006 until a nvidia developer in their forums acknowledged it was a problem and gave it a bug report number.
I hate binary drivers as much as the next guy, but you are not being fair here.
The 2004 report was on xorg bugzilla, but it wasn't reported against nvidia drivers, instead against org/Server/General. A nvidia (propertiary) section was added later to xorg bugzilla, but nobody took the time to dig through bugzilla to search what to reassign to that category.
Nobody reported or tagged it as security issue until recently.
When it was reported to nvnews forums nvidia started promptly working on it.
It was rather a fault of bug reporting process than evidence of evilness of propiertary application development. People who report bugs are lost - they don't know where to report, how to give all information developers need and so-on. Developers hate administrative tasks such as digging and reassiging bugs in bugzilla..
to post comments)