Binary-only kernel modules may be banned
Posted Dec 14, 2006 8:10 UTC (Thu) by
drag (subscriber, #31333)
In reply to:
Binary-only kernel modules may be banned by bronson
Parent article:
Binary-only kernel modules may be banned
The bug that ended up being a security threat was 2 years old.
There is a crapload of bugs that Nvidia isn't going to bother to fix and one of them ended up being a security problem that wasn't disclosed completely until a little bit ago.
If they were open source people would of:
A. fixed the bug over a year ago
B. realised the security problem almost imediately.
http://www.rapid7.com/advisories/R7-0025.jsp for details.
You see the problem is that nobody can fix this. Nvidia isn't going to bother to much about it as it's not realy a remote root. (It's possible, but not plausable.)
You have to realise about binary drivers is..
1. A lot of security problems and a lot of performance/crashing bugs are caused by drivers in Windows. It's so bad that Microsoft had to impliment their byzzantine WHQL certification system for trying to combat it. That didn't work so they changed their driver model for Vista to isolate the kernel more from buggy drivers. And it's not even protecting against bad hardware support.. it's just protecting kerenl memory space against those bad drivers
2. Propriatory driver makers for Linux are the same people that cause all sorts of problems for Windows users.
(Think: Creative, ATI)
3. Their budget for working with Linux is much less then what they have for working for Windows.
4. They don't care nearly as much about their Linux customers as their Windows customers.
Linux, due to the culture of openness and limited resources is never ever going to be able to support hardware as well as Windows does if it has to depend on propriatory drivers.
If the drivers are open source then Linux can provide much higher quality of support.
Linux _can't_ win vs Windows in the desktop market if it needs propriatory drivers. It's just setting linux up to lose.
If push comes to shove then Microsoft will just pull strings in Nvidia or ATI and there goes our drivers. They will be less featurefull then Windows, be buggier, and not support the latest hardware (sound familar?)
(
Log in to post comments)