hn-classics/_stories/2008/2539839.md

4.2 KiB

created_at title url author points story_text comment_text num_comments story_id story_title story_url parent_id created_at_i _tags objectID year
2011-05-12T08:35:32.000Z Linus Torvalds on the "security circus" (2008) http://lkml.org/lkml/2008/7/15/296 vog 87 55 1305189332
story
author_vog
story_2539839
2539839 2008

Source

LKML: Linus Torvalds: Re: [stable] Linux 2.6.25.10

| ----- | | lkml.org |   |

[lkml]   [2008]   [Jul]   [ 15]5   [last100]   RSS Feed

Views: [wrap][no wrap]   [headers]  [forward] 

|   | |

Messages in this thread

|

| |

| Date | Tue, 15 Jul 2008 09:13:03 -0700 (PDT) | | | From | Linus Torvalds <> | | | Subject | Re: [stable] Linux 2.6.25.10 |

|

|

On Tue, 15 Jul 2008, Linus Torvalds wrote:  
>   
> So as far as I'm concerned, "disclosing" is the fixing of the bug. It's   
> the "look at the source" approach.  
  
Btw, and you may not like this, since you are so focused on security, one   
reason I refuse to bother with the whole security circus is that I think   
it glorifies - and thus encourages - the wrong behavior.  
  
It makes "heroes" out of security people, as if the people who don't just   
fix normal bugs aren't as important.  
  
In fact, all the boring normal bugs are _way_ more important, just because   
there's a lot more of them. I don't think some spectacular security hole   
should be glorified or cared about as being any more "special" than a   
random spectacular crash due to bad locking.  
  
Security people are often the black-and-white kind of people that I can't   
stand. I think the OpenBSD crowd is a bunch of masturbating monkeys, in   
that they make such a big deal about concentrating on security to the   
point where they pretty much admit that nothing else matters to them.  
  
To me, security is important. But it's no less important than everything   
*else* that is also important!  
  
			Linus  

| | |   | |   | |   | / | |   | Last update: 2008-07-15 18:17    [W:0.014 / U:1.760 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site |   | |