Hector Martin

Don't worry, my code is present on more devices than grsecurity. I don't need personal validation from a random person on Twitter ;)

Great, then don't get too heated. I mean no disrespect when I state that your comments about testing show lack of experience

(or you have experience, but you are trying to pursue an agenda, which is IMHO a bit worse, but understandable)

arguments that ppl just came to exactly same solution ∗after∗ having read someone else's are disturbing

That's a false allegation. It's not what happened. You are making an outright false claim about what someone did without evidence.

It's completely untrue that it was after reading the other implementation. It's further not true that it's exactly the same implementation.

They implemented their fix before the kernel had get_random_long, so it used a non-CSPRNG implementation. They needed the proper fix too.

If I was aware they had their alternative fix for it, I would have mentioned it in the commit message and pointed out what was different.