News for hackers. Stuff that matters.

A comment on Are we doing this again? Yes, we're doing this again. Parent comment

Re:Are we doing this again? Yes, we're doing this again by sandworm101 on Thursday November 09, 2023 @05:33AM (#38203284)
And when a company wants to patch a zero-day exploit being used by criminals to scam customers? What if that impacts the government's surveillance activities?

And what of free/open source software? Does every linux update now need mi6 vetting? Or will we just trust His Majesty's to be nice and not do evil things to us?

[ Parent | on HN ]
Re:Are we doing this again? Yes, we're doing this again by nonmo on Thursday November 09, 2023 @05:45AM (#38203348)
Patching an 0-day isn't the same thing as adding a new privacy or security feature.

Linux is different because anyone can very clearly see the roadmap for features by following the LKML.

[ Parent | on HN ]
Re:Are we doing this again? Yes, we're doing this again by pjc50 on Thursday November 09, 2023 @06:11AM (#38203559)
> Patching an 0-day isn't the same thing as adding a new privacy or security feature

You think that, but where is that written?

> Linux is different because anyone can very clearly see the roadmap for features by following the LKML.

If there's a requirement to inform the HO, posting on LKML is not going to meet that. Also the HO may start vetoing Linux changes.

[ Parent | on HN ]
Re:Are we doing this again? Yes, we're doing this again by nonmo on Friday November 10, 2023 @10:15AM (#38219851)
It's common knowledge. Literally no-one working in this field considers patching a buffer overrun or use-after-free or whatever to be the same as adding a security feature.
[ Parent | on HN ]