Why Linux developers do not fix reported issues or ignore bug reports completely

Re:Why Linux developers do not fix reported issues or ignore... by mushufasa on Friday May 31, 2024 @05:32PM (#40540501)

my understanding is there are so many vulnerabilities when someone has physical device access that the security community essentially suggests you assume any device is compromised if you lost physical access

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by wslh on Friday May 31, 2024 @07:56PM (#40541498)

My understanding is that these bugs should not exist in 2024. Less if they are published.

Do you lose physical access if someone connects a thunderbolt/usb/whatever to your computer? No, this is not losing physical access.

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by KerrAvon on Friday May 31, 2024 @07:46PM (#40541431)

That used to be the advice. But it doesn't fly anymore when your OS is running on an easily-stolen device like a phone.

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by Seattle3503 on Friday May 31, 2024 @08:07PM (#40541573)

Or a use wants to plug into someone else's charging port. (Don't tell them not to do it, they are going to anyways)

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by arp242 on Friday May 31, 2024 @09:26PM (#40542070)

Phones don't have Firewire, and no one is charging their device through Firewire.

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by saagarjha on Friday May 31, 2024 @08:30PM (#40541714)

This has not been true for years for consumer electronics.

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by Bjartr on Friday May 31, 2024 @10:55PM (#40542514)

How so?

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by saagarjha on Saturday June 01, 2024 @03:50AM (#40543739)

The threat model for a modern smartphone includes people with physical access to the device.

[ Parent | on HN ]

Re:Why Linux developers do not fix reported issues or ignore... by inopinatus on Saturday June 01, 2024 @02:51AM (#40543489)

This is begging the question, because the cavalier attitude described in the anecdote above illustrates how that advice arises.

[ Parent | on HN ]