| |||||||||||||
|
| |||||||||||||
The Art of Unix ProgrammingThe Art of Unix ProgrammingPosted Feb 13, 2003 15:10 UTC (Thu) by erat (guest, #21)In reply to: The Art of Unix Programming by anr Parent article: The Art of Unix Programming 1) Lots of software that's well written has a security goof every now and then. Sometimes it isn't the software itself, but a library that it's linked against that's causing the problem. The Linux kernel gets security issues too, but I don't see anyone questioning whether or not it's a quality piece of sofware (it's gotten a bit too "kitchen sink"-ish for my taste, but it's still a high quality piece of work). 2) I have no problem with guns, but even I don't like pro-gun propaganda in the books I read (unless I'm reading a pro-gun book, of course, which is something I've never done). At the risk of causing ESR to gripe again about how "...[his] own people turn[ed] on [him]...", I'll state that (IMHO) the best thing ESR can do is divorce his writing from his ego and politics and let his technical prowess be the main focus. He's a great guy (I met him once at a local LUG meeting), he's technically brilliant, and he's a fantastic writer, but his ego is the size of Mt. Everest and quite often it seems to get in the way. Case in point: we're discussing his political views on the FSF and gun control instead of the technical merits of the book. How many times does this need to happen before he realizes he'd be doing the community a much more valuable service by just sharing his technical wisdom?
(Log in to post comments)
The Art of Unix Programming Posted Feb 13, 2003 19:27 UTC (Thu) by giraffedata (subscriber, #1954) [Link] Come on, guys. The book doesn't contain a chapter promoting gun freedom; it just uses pro-gun statements in example text. The example text had to exist one way or another; can't readers just ignore the content?From a practical point of view, though, I can agree with the point that ESR would be better off using neutral example text. A writer has to take a reader as he finds him, and if the reader is delicate, the writer has to treat him delicately or risk losing the reader. --
The Art of Unix Programming Posted Feb 13, 2003 19:29 UTC (Thu) by JoeBuck (subscriber, #2330) [Link] The kernel is a vastly bigger program than fetchmail, and it is a highly parallel program, while fetchmail is a sequential program. The kernel must protect one process from interfering with another and enforce privilege; for fetchmail the issues are far simpler. Given this, one would expect to see vastly more security issues in the kernel. For its size, fetchmail has had an unexpectedly large number of security holes. It's not unreasonable to ask why this is so.
The Art of Unix Programming Posted Feb 23, 2003 6:42 UTC (Sun) by linuxtech (guest, #459) [Link] At the risk of causing ESR to gripe again about how "...[his] own people turn[ed] on [him]..."... I missed that, care to explain or show us where it is posted?
|
|
||||||||||||