2018-02-23 18:58:03 +00:00
|
|
|
|
---
|
|
|
|
|
created_at: '2011-05-12T08:35:32.000Z'
|
|
|
|
|
title: Linus Torvalds on the "security circus" (2008)
|
|
|
|
|
url: http://lkml.org/lkml/2008/7/15/296
|
|
|
|
|
author: vog
|
|
|
|
|
points: 87
|
|
|
|
|
story_text: ''
|
|
|
|
|
comment_text:
|
|
|
|
|
num_comments: 55
|
|
|
|
|
story_id:
|
|
|
|
|
story_title:
|
|
|
|
|
story_url:
|
|
|
|
|
parent_id:
|
|
|
|
|
created_at_i: 1305189332
|
|
|
|
|
_tags:
|
|
|
|
|
- story
|
|
|
|
|
- author_vog
|
|
|
|
|
- story_2539839
|
|
|
|
|
objectID: '2539839'
|
|
|
|
|
|
|
|
|
|
---
|
2018-02-23 18:19:40 +00:00
|
|
|
|
[Source](http://lkml.org/lkml/2008/7/15/296 "Permalink to LKML: Linus Torvalds: Re: [stable] Linux 2.6.25.10")
|
|
|
|
|
|
|
|
|
|
# LKML: Linus Torvalds: Re: [stable] Linux 2.6.25.10
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| ----- |
|
|
|
|
|
| ![lkml.org][1] | |
|
|
|
|
|
|
|
|
|
|
[ [lkml]][2] [ [2008]][3] [ [Jul]][4] [ [15]][5] [ [last100]][6] ![RSS Feed][7]
|
|
|
|
|
|
|
|
|
|
Views: [[wrap]][8][[no wrap]][8] [[headers]][9] [[forward]][10]
|
|
|
|
|
|
|
|
|
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Messages in this thread
|
|
|
|
|
|
|
|
|
|
* [First message in thread][11]
|
|
|
|
|
* [ pageexec@freemail ...][12]
|
|
|
|
|
* [Linus Torvalds][13]
|
|
|
|
|
* [Linus Torvalds][14]
|
|
|
|
|
* ["Aidan Thornton"][14]
|
|
|
|
|
* [ pageexec@freemail ...][15]
|
|
|
|
|
* [Linus Torvalds][16]
|
|
|
|
|
* [Linus Torvalds][17]
|
|
|
|
|
* [Phil Pell][18]
|
|
|
|
|
* [Theodore Tso][19]
|
|
|
|
|
* [ pageexec@freemail ...][20]
|
|
|
|
|
* [Greg KH][21]
|
|
|
|
|
* [David Miller][22]
|
|
|
|
|
* [ pageexec@freemail ...][23]
|
|
|
|
|
| ![/][24] |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Date | Tue, 15 Jul 2008 09:13:03 -0700 (PDT) | |
|
|
|
|
|
| From | Linus Torvalds <> | |
|
|
|
|
|
| Subject | Re: [stable] Linux 2.6.25.10 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
On Tue, 15 Jul 2008, Linus Torvalds wrote:
|
|
|
|
|
>
|
|
|
|
|
> So as far as I'm concerned, "disclosing" is the fixing of the bug. It's
|
|
|
|
|
> the "look at the source" approach.
|
|
|
|
|
|
|
|
|
|
Btw, and you may not like this, since you are so focused on security, one
|
|
|
|
|
reason I refuse to bother with the whole security circus is that I think
|
|
|
|
|
it glorifies - and thus encourages - the wrong behavior.
|
|
|
|
|
|
|
|
|
|
It makes "heroes" out of security people, as if the people who don't just
|
|
|
|
|
fix normal bugs aren't as important.
|
|
|
|
|
|
|
|
|
|
In fact, all the boring normal bugs are _way_ more important, just because
|
|
|
|
|
there's a lot more of them. I don't think some spectacular security hole
|
|
|
|
|
should be glorified or cared about as being any more "special" than a
|
|
|
|
|
random spectacular crash due to bad locking.
|
|
|
|
|
|
|
|
|
|
Security people are often the black-and-white kind of people that I can't
|
|
|
|
|
stand. I think the OpenBSD crowd is a bunch of masturbating monkeys, in
|
|
|
|
|
that they make such a big deal about concentrating on security to the
|
|
|
|
|
point where they pretty much admit that nothing else matters to them.
|
|
|
|
|
|
|
|
|
|
To me, security is important. But it's no less important than everything
|
|
|
|
|
*else* that is also important!
|
|
|
|
|
|
|
|
|
|
Linus
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| ![][25] |
|
|
|
|
|
| |
|
|
|
|
|
| | ![][26] | | ![/][27] |
|
|
|
|
|
| | Last update: 2008-07-15 18:17 [W:0.014 / U:1.760 seconds]
|
|
|
|
|
©2003-2018 [Jasper Spaans][28]|hosted at [Digital Ocean][29] and [TransIP][30]|[Read the blog][31]|[Advertise on this site][32] | | |
|
|
|
|
|
|
|
|
|
|
[1]: http://lkml.org/images/toprowlk.gif
|
|
|
|
|
[2]: http://lkml.org/lkml
|
|
|
|
|
[3]: http://lkml.org/lkml/2008
|
|
|
|
|
[4]: http://lkml.org/lkml/2008/7
|
|
|
|
|
[5]: http://lkml.org/lkml/2008/7/15
|
|
|
|
|
[6]: http://lkml.org/lkml/last100
|
|
|
|
|
[7]: http://lkml.org/images/rss-or.gif
|
|
|
|
|
[8]: http://lkml.org#
|
|
|
|
|
[9]: http://lkml.org/lkml/mheaders/2008/7/15/296
|
|
|
|
|
[10]: http://lkml.org/lkml/bounce/2008/7/15/296
|
|
|
|
|
[11]: http://lkml.org/lkml/2008/7/3/40
|
|
|
|
|
[12]: http://lkml.org/lkml/2008/7/15/281
|
|
|
|
|
[13]: http://lkml.org/lkml/2008/7/15/293
|
|
|
|
|
[14]: http://lkml.org/lkml/2008/7/17/464
|
|
|
|
|
[15]: http://lkml.org/lkml/2008/7/15/413
|
|
|
|
|
[16]: http://lkml.org/lkml/2008/7/15/425
|
|
|
|
|
[17]: http://lkml.org/lkml/2008/7/15/472
|
|
|
|
|
[18]: http://lkml.org/lkml/2008/7/17/6
|
|
|
|
|
[19]: http://lkml.org/lkml/2008/7/15/390
|
|
|
|
|
[20]: http://lkml.org/lkml/2008/7/15/486
|
|
|
|
|
[21]: http://lkml.org/lkml/2008/7/15/611
|
|
|
|
|
[22]: http://lkml.org/lkml/2008/7/15/619
|
|
|
|
|
[23]: http://lkml.org/lkml/2008/7/15/637
|
|
|
|
|
[24]: http://lkml.org/images/icornerl.gif
|
|
|
|
|
[25]: http://lkml.org/images/icornerr.gif
|
|
|
|
|
[26]: http://lkml.org/images/bcornerl.gif
|
|
|
|
|
[27]: http://lkml.org/images/bcornerr.gif
|
|
|
|
|
[28]: http://blog.jasper.es/
|
|
|
|
|
[29]: https://www.digitalocean.com/?refcode=9a8e99d24cf9
|
|
|
|
|
[30]: https://www.transip.nl/
|
|
|
|
|
[31]: http://blog.jasper.es/categories.html#lkml-ref
|
|
|
|
|
[32]: https://buysellads.com/buy/detail/244952
|
|
|
|
|
|