A nasty local kernel vulnerability
Posted Feb 27, 2013 10:45 UTC (Wed) by khim
In reply to: A nasty local kernel vulnerability
Parent article: A nasty local kernel vulnerability
uhm, do you have stats on how many times we cried wolf (assuming you mean we said something was a security bug where it wasn't)? we're not 100% correct of course but much closer to it than to 0% so it's a far cry (pun intended) from crying wolf ;).
And this answer shows what's wrong with you messages succinctly. You assume people want to know about all security bugs for some reason. But why should they care? Do you dig all the information about all the internal incidents on the power stations which power you computer or all the problems with pumping station or all the problems with all the farmers who grow food you eat? I doubt it: you only want to know about incidents which can actually affect you! And Joe Average is the same: security bugs which have little chance of affecting him directly are of no interest to him!
From that POV you "cry wolf" all the time and you are much, much, MUCH closer to 0% then to 100%, sorry.
the data i have say that people who care about security are avid readers of spender's changelog to the point that the just released ubuntu fix for this very problem misattributed the bug to spender instead of Mathias.
Of course! That's their work! It's similar to nuclear power plant workers: they study information about incidents on other plants diligently, indeed. But general public? No, it's not what they want to know and it's not what they are supposed to know. When you bait these people and ridicule them because they don't diligently study all your patches you just show your hypocrisy, nothing more, nothing less.
details don't matter for them, regardless of what we or anyone else have to say about them, that information doesn't even reach them so we can't talk about reaction as there's nothing to react to in the first place.
Sure. Detail don't matter for them but if they'll know that situation is so dire that nuclear station near them can blow up at any moment they should care and they will care. That's about what people expect from discussions on LWN — and that's what you expressly refuse to discuss. You show some snippets of information and then laugh on people who can try to understand if they actually should care about it or if they should expect their more or less regular system updates to fix problems. After few such repeats people learn that it's more-or-less impossible to receive useful information from you and they know that after bazillion of your "wolf" cries wolf didn't come thus they assume you again talk something they can safely ignore.
to post comments)