4 ms·

Please can someone give a brief summary of the conclusions of this talk for those of use that don't have the time and/or bandwidth to watch this? Thanks.

• teamhappy 9y ago
  Linux has more CVEs than the BSDs. Ilja wanted to know if that's because they have less bugs/better code or because more people have read the Linux code. Turns out the BSDs have just as many bugs as Linux. (He found dozens over the course of 3 months.) OpenBSD has less bugs than FreeBSD (presumably because they have removed a lot of old code) and FreeBSD has less bugs than NetBSD. After reporting the bugs he noticed that OpenBSD handles bugs really well, NetBSD less well and FreeBSD in many cases not at all. (By handling the bugs I mean fixing them in current and providing patches/advisories for the latest release.)
  • subsubsub 9y ago
    Thanks for taking the time. Happy New Year!
  • ianai 9y ago
    Why doesn’t FreeBSD address them?
    • teamhappy 9y ago
      No idea. He didn't mention anything during the talk (I haven't seen the QA at the end). He said he reported them a few months back and checked if they were fixed a few days before congress. 3 were fixed, the other ~20 weren't.