3 ms·
Fixing all memory corruption bugs is infeasible without fundamentally changing the way Linux is developed. There is so much code (and it’s being added to, chang
by jbangert 9y ago
Fixing all memory corruption bugs is infeasible without fundamentally changing the way Linux is developed. There is so much code (and it’s being added to, changed, etc.) written by humans that make mistakes.
There will always be some bugs that are in between being discovered (by someone, maybe malicious, maybe not), and being fixed. How else do you prevent against vulnerabilities in that stage?
- banachtarski 9y agoLinus' response is that calling it an infeasible problem is a cop-out. The right way to go about it is to fix them all, incrementally if need be, and not break userland in the process.
- unityByFreedom 9y agoThese comments sound analogous to real world security and societal issues. Like, the desire to increase army size and addressing the underlying issues. One is a short term solution, the other long term.
- fsloth 9y agoI think given the quantity of our planetary computation infrastructure Linux runs, it's very much a real world issue.