Kernel.org's road to recovery [LWN.net]

Kernel.org's road to recovery

Posted Oct 10, 2011 13:34 UTC (Mon) by vonbrand (subscriber, #4458)
In reply to: Kernel.org's road to recovery by PaXTeam
Parent article: Kernel.org's road to recovery

I did not say that research into security impact of fixes is useless, I contend that the first impression by the one doing the patch is probably useless. Quite a different statement.

(Log in to post comments)

Kernel.org's road to recovery

Posted Oct 10, 2011 14:31 UTC (Mon) by PaXTeam (subscriber, #24616) [Link]

this is what you said:

> Any such assesment they do will miss an order of magnitude more
> exploitable flaws than the ones flagged, and flag many that are
> completely irrelevant. Pure noise, a complete waste of effort.

i don't see 'first impression' in there, but i do see 'assessment' which in my book is much closer to research than what you now claim you meant. but let it be ;), the main thing is that you now admitted that there is such a thing as security bugs (you're one step ahead of the kernel devs) and their research is not useless, contrary to what Linus/Ingo/etc claimed over the years. the next step you'll have to make is that doing the research is not enough, it has to be published to be of value and then we're on the same page and can ask the kernel devs together to not suppress such research. i'm so rooting for you!