3 ms·
This is the problem with grsecurity and the security community in general, I think. grsecurity includes things that are relatively safe and beneficial. It also
by makomk 11y ago
This is the problem with grsecurity and the security community in general, I think. grsecurity includes things that are relatively safe and beneficial. It also - for example - redefines integer arithmetic kernel-wide in a way that causes massive false positives and kernel panics. Insisting that if you don't want the parts likely to take critical servers down at the worst possible time for no reason, you may as well not bother is ridiculous, broken, and leads to reasonable people just not bothering.
- digi_owl 11y ago> This is the problem with grsecurity and the security community in general Yep. They keep coming across as treating security as something binary. Either it is secure or it is not. And the moment even the most convoluted of CVEs gets published, anything affected is in their view insecure. And thus needs to be taken out of production until a fix has been applied. Frankly it seems quite a number of the most outspoken in the community is not in it for the hohum daily security process, but as some kind of grand joust with "the man". Thus their low water mark for security is "can it stop the NSA".