News for hackers. Stuff that matters.

A comment on Freenginx: Core Nginx developer announces fork. Parent comment

Re:Freenginx: Core Nginx developer announces fork by Twirrim on Wednesday February 14, 2024 @08:45PM (#39378148)
It's in the published source code, as a usable feature, just flagged as experimental and not compiled by default. It's not like this is some random development branch. It's there, to be used en route to being stable. People will have downloaded a release tagged version of the source code, compiled that feature in and used it.

By what definition is that not shipped?

> I am actually completely shocked this needs to be explained. Legitimate insanity.

Right back at you.

[ Parent | on HN ]
Re:Freenginx: Core Nginx developer announces fork by whoknowsidont on Wednesday February 14, 2024 @09:12PM (#39378328)
>just flagged as experimental and not compiled by default

Are UML diagrams considered in scope too?

[ Parent | on HN ]
Re:Freenginx: Core Nginx developer announces fork by arter4 on Thursday February 15, 2024 @01:53AM (#39379846)
UML diagrams are not code. You cannot file a CVE for something that is not an actual (software or hardware) implementation.
[ Parent | on HN ]
Re:Freenginx: Core Nginx developer announces fork by YetAnotherNick on Thursday February 15, 2024 @01:16AM (#39379680)
> to be used en route to being stable

Where did you get this info? It might be the feature is actively being worked on and the DoS is a known issue which would be fixed before merge. Lot of projects have contrib folder for random scripts and other things which wouldn't get merged before some review but users are free to run the script if they want to. Experimental compile time build flags are experimental by definition.

[ Parent | on HN ]
Re:Freenginx: Core Nginx developer announces fork by bnolsen on Thursday February 15, 2024 @04:14PM (#39388964)
I've had an optional experimental feature marked with a CVE. It's not a big deal as it just lets folks know that they should upgrade if they are using that experimental feature in the affected versions.
[ Parent | on HN ]