Quotes of the week

I have one final question for you, given that I have been worried about RCU pointer leaks for many years, but I have not heard of many actually happening. Is this because Linux-kernel developers are admirably careful with their RCU read-side critical sections? Or is it because RCU grace periods are normally long enough that these developers are getting away with egregious RCU pointer-leak bugs? ;–)

I think we should simply make it a rule that "a 'security' bug that is found by AI is public".

Now, I may be influenced by that "my inbox is a disaster during the merge window" thing, but I do think this is pretty fundamental: if somebody finds a bug with more or less standard AI tools (ie we're not talking magical special hardware and nation-state level efforts), then that bug pretty much by definition IS NOT SECRET.

So why should be consider it special and have it be on the security list?