3 ms·

Ah Spender. Always the drama queen. The real problem here is not companies abusing the GPL (good luck with that), but grsecurity not being integrated with main

Ah Spender. Always the drama queen. The real problem here is not companies abusing the GPL (good luck with that), but grsecurity not being integrated with mainline after more than a decade. You see, if Spender really cared about security he would work with the kernel developers in order to get grsecurity into the kernel but of course being such a famewhore, he never did that. Everything is fine as long as he is the center of attention, actual security be damned. Spender: I among many have little sympathy for you, you've long exhausted our patience with your antics. Grsecurity is a niche project with minimal actual security impact in the "real world", all because of the deranged way you choose to manage it. Your primary concern, your _ONLY_ concern should be getting grsecurity into the kernel, not companies ripping you off, not companies abusing your trademark, not companies "not playing nice". In the grand scheme of things, these are irrelevant.

dewyatt 11y ago
Do you mean Spengler, perhaps?
- adamzochowski 11y ago
  I think "spendy" is his irc nick. And "spender" is his grsec machine nick https://www.grsecurity.net/~spender/ https://www.grsecurity.net/~spender/
csirac2 11y ago
I can appreciate that it's been a bit like that, but isn't the truth really somewhere in between? Oversized egos are a problem at the best of times in open source, especially in the kernel. Which has traditionally had a culture of casual indifference toward the security priorities of PaX/grsec, and some would say toward security generally (I don't buy that - there's a lot of concern for integrity in the kernel, and that at least buys you some security). Whilst it would have been great if Spender could have completely changed his personality, outlook and perspective on the world so that he could commandeer the linux kernel from the outside-in toward his vision of a safer kernel, is that really compatible with the wider project? And so, it's equally depressing there hasn't been more recruitment from the kernel side - the side that actually has resources - to figure out a path toward getting PaX stuff mainlined from the inside-out. I guess my point is: grsec has one focus, one priority. But the Linux kernel is a project that has a much more vast, broader scope of competing priorities to untangle, and I just can't see that such an enormous, busy and byzantine project ecosystem truly will ever see a clear mandate to get something as disruptive and single-minded as grsec mainlined. Not only would Spender have to become a different person, but the core kernel teams as well. In any case, I've reduced my patreon donations and put what little that is towards grsecurity. It's certainly that important and useful to me.

dewyatt 11y ago

Do you mean Spengler, perhaps?

adamzochowski 11y ago
I think "spendy" is his irc nick. And "spender" is his grsec machine nick https://www.grsecurity.net/~spender/ https://www.grsecurity.net/~spender/

csirac2 11y ago

I can appreciate that it's been a bit like that, but isn't the truth really somewhere in between? Oversized egos are a problem at the best of times in open source, especially in the kernel. Which has traditionally had a culture of casual indifference toward the security priorities of PaX/grsec, and some would say toward security generally (I don't buy that - there's a lot of concern for integrity in the kernel, and that at least buys you some security). Whilst it would have been great if Spender could have completely changed his personality, outlook and perspective on the world so that he could commandeer the linux kernel from the outside-in toward his vision of a safer kernel, is that really compatible with the wider project? And so, it's equally depressing there hasn't been more recruitment from the kernel side - the side that actually has resources - to figure out a path toward getting PaX stuff mainlined from the inside-out. I guess my point is: grsec has one focus, one priority. But the Linux kernel is a project that has a much more vast, broader scope of competing priorities to untangle, and I just can't see that such an enormous, busy and byzantine project ecosystem truly will ever see a clear mandate to get something as disruptive and single-minded as grsec mainlined. Not only would Spender have to become a different person, but the core kernel teams as well. In any case, I've reduced my patreon donations and put what little that is towards grsecurity. It's certainly that important and useful to me.