News for hackers. Stuff that matters.
Re:“They introduce kernel bugs on purpose” by dcow on Wednesday April 21, 2021 @08:55PM (#26897368)
What this proves to me is that perhaps lightweight contributions to the kernel should be done in safe languages that prevent memory leaks and with tooling that actively highlights memory safety issues like use after free. Broader rust adoption in the kernel cant come soon enough.

I also consider Greg’s response just as much a test of UMN’s internal processes as the researcher’s attempt at testing kernel development processes. Hopefully there will be lessons learned on both sides and this benign incident makes the world better. Nobody was hurt here.

Re:“They introduce kernel bugs on purpose” by dumpsterdiver on Wednesday April 21, 2021 @10:37PM (#26898123)
I understand where you are coming from, and I agree that it's good that we are paying more attention to memory safety, but how would a memory safe language protect you from an intentionally malicious code commit? In order to enact their agenda they would need to have found a vulnerability in your logic (which isn't hard to do, usually). Memory safety does not prevent logic errors.

> Nobody was hurt here.

This is where you got me, because while it's clear to me that short-term damage has been done, in the long term I believe you are correct. I believe this event has made the world a safer place.

Re:“They introduce kernel bugs on purpose” by chihuahua on Wednesday April 21, 2021 @11:20PM (#26898365)
One could argue that when a safe language eliminates memory safety bugs (intentional or unintentional), it makes it easier for the reviewer to check for logic errors. Because you don't have to worry about memory safety, you can focus completely on logic errors.
Re:“They introduce kernel bugs on purpose” by dumpsterdiver on Wednesday April 21, 2021 @11:30PM (#26898408)
I would agree that it does, and I do agree that we should try to reach that point. I just want to point out that I think it's dangerous to assume safety in general because one thing is assumed to be safe.