Re:Linux kernel: multiple x86_64 vulnerabilities
by dmix on Wednesday December 17, 2014 @04:58PM
(#8764601)
Even if that is the case for whatever legal reason just because they don't accept patches from PaX directly doesn't mean they can't provide their own implementations.
For example, PaX was the first person to implement ASLR for Linux... and that was adopted into the Linux Kernel many years later (as well as by Windows, OSX, and other BSDs). https://en.wikipedia.org/wiki/Address_space_layout_randomiza...
Re:Linux kernel: multiple x86_64 vulnerabilities
by zaroth on Thursday December 18, 2014 @12:36AM
(#8766125)
I don't think anyone should have to identify themselves in order to contribute to open source, but I will grant you the copyright issues.
The person or entity submitting the code should be irrelevant. Exacting code review and testing establish the code as trustworthy or compromised, not the identity of the author.
I value my privacy more than most. But when you are contributing code to a public project used all over the world by millions of people, you should at least be willing to identify yourself, or have very good reasons for not doing so. And that's before we get to the nontrivial copyright issues.