News for hackers. Stuff that matters.
Re:QUIC Is Not Quick Enough over Fast Internet by tialaramex on Monday September 09, 2024 @08:36AM (#41487933)
I don't agree that it's absurd. I would say it reflects a proper understanding of their situation.

You've doubtless heard Tony Hoare's "There are two ways to write code: write code so simple there are obviously no bugs in it, or write code so complex that there are no obvious bugs in it.". Linux is definitely in the latter category, it's now such a sprawling system that determining whether a bug "really" has security implications is no long a reasonable task compared to just fixing the bug.

The other reason is that Linux is so widely used that almost no assumption made to simplify that above task is definitely correct.

Re:QUIC Is Not Quick Enough over Fast Internet by JoshTriplett on Monday September 09, 2024 @08:46AM (#41488002)
That's fine, except that it is thus no longer meaningful to compare CVE count.
Re:QUIC Is Not Quick Enough over Fast Internet by hifromwork on Monday September 09, 2024 @10:00AM (#41488667)
I like CVEs, I think Linux approach to CVEs is stupid, but also it was never meaningful to compare CVE count. But I guess it's hard to make people stop doing that, and that's the reason Linux does the thing it does out of spite.