News for hackers. Stuff that matters.

A comment on Grsecurity Developer Spender's Feelings on the State of Linux Security. Parent comment

Re:Grsecurity Developer Spender's Feelings on the State of L... by gozo on Friday November 06, 2015 @11:10AM (#10520178)
Talented security folks, especially those that can engineer security rather than penetration testing, have so many opportunities that fighting an uphill battle on mailing lists just isn't very attractive.
[ Parent | on HN ]
Re:Grsecurity Developer Spender's Feelings on the State of L... by forgottenpass on Friday November 06, 2015 @11:46AM (#10520383)
That's part of my point. As long as the work is "someone else's problem," will it ever get done?

If other opportunities are there for someone with a security skillet, what makes a libfoo maintainer become skilled enough to make the most secure libfoo possible, but also stay on libfoo? Does saying "security is important" mean that security is important, or does it means "have my skillset, and also do the busywork someone with my skillset is able and happy to ignore?"

[ Parent | on HN ]