That reminds me of when people used to say, "No one got fired for choosing IBM". Security is an area that Linux has been, and still is, weak at. There needs to

That reminds me of when people used to say, "No one got fired for choosing IBM". Security is an area that Linux has been, and still is, weak at. There needs to be a more concerted, consistent effort to analyze code, especially old code, for security bugs. There needs to be someone a bit grumpy and a bit fucking crazy to nudge Linus and ask if there's a more secure way of doing something. There are also areas that Linus needs to be more forthcoming about. There needs to be some notification on security holes, so firewall vendors, etc, can develop rulesets to detect and block exploitation attempts before they happen. Additionally, not notifying of security holes makes it harder to analyze whether or not one should expend the resources in testing/deploying a new kernel, or even where to start work on backporting. His desire for security by obscurity is a huge problem here, and really does need to be fixed.