Conversation

Rich Felker
@RichFelker
Replying to
@dvyukov
@thegrugq
and
@gregkh
No. Both triage and fixing are labor intensive. It's of no immediate usefulness to find new bugs when there's already a shortage of labor to fix the ones already reported. Of course it becomes useful later once there is.
1
7
Daniel Micay
@DanielMicay
Replying to
@RichFelker
@dvyukov
and 2 others
It's a big deal that they come with reproducible test cases though. It's a lot better than a typical bug report in that regard. Any crash of the core kernel from userspace could be treated as a serious, priority issue if it was robust and not scaled far beyond maintainability.
1
5
Daniel Micay
@DanielMicay
Replying to
@DanielMicay
@RichFelker
and 3 others
It's a great example of how simply throwing more and more resources at a project isn't a recipe for robustness or security. They'll just keep piling on the complexity and attack surface because it's the culture and design of the project. Give the same developers a trillion...
1
1
Daniel Micay
@DanielMicay
Replying to
@DanielMicay
@RichFelker
and 3 others
dollars and twenty years to build a new kernel and I think they'll end up with a similar massively complex and bloated monolithic kernel. Same reasons that giving the OpenSSL developers a bunch of funding isn't going to fix it, and the Linux kernel already has immense funding.
1
1
Daniel Micay
@DanielMicay
Replying to
@DanielMicay
@RichFelker
and 3 others
Whining about lack of developers after driving so many people away particularly when they're getting paid huge salaries and have immense backing of the project. If anyone asks me about contributing to the Linux kernel, I steer them to a more worthy project with a brighter future.
1