4 ms·
In relation to mitigations, what are the "Loudmouth Linus" and "recent article in Washington Post" references about?
by biot 11y ago
In relation to mitigations, what are the "Loudmouth Linus" and "recent article in Washington Post" references about?
- bronson 11y agohttp://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/ http://www.washingtonpost.com/sf/business/2015/11/05/net-of-... Linus, in one of his less bright moments, called the OpenBSD team a bunch of masturbating monkeys [1]. Unfortunately, the Linux kernel's conspicuous lack of attack mitigation measures (compared to Win/Mac/OpenBSD/etc) does make one wonder who has been masturbating over the past few years. [1] http://article.gmane.org/gmane.linux.kernel/706950 http://article.gmane.org/gmane.linux.kernel/706950 (from the article) (to be clear: I like and use Linux a lot... but Linus's disregard for security is becoming a liability)
- kentonv 11y agohttp://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/ http://www.washingtonpost.com/sf/business/2015/11/05/net-of-... Article could have been good but is a bit too sensationalist, e.g. pointing out that Ashley Madison runs Linux only to admit that it had nothing to do with their security breach -- OK, so why did you mention it, then? (In truth, kernel security rarely matters for servers, because the application is usually the first line of defense. I say this as someone who runs one of the rare services where kernel security does matter, so yeah, I wish Linux did more hardening, but the article is misleading.)
- elchief 11y agoTorvalds called openbsd devs "masturbating monkeys" for their focus on security. Wapo had an article on linux security the othe day.