4 ms·

Really? > The kernel is also very lacking in security. It is a monolithic kernel written entirely in a memory unsafe language and has hundreds of bugs, many be

Really? > The kernel is also very lacking in security. It is a monolithic kernel written entirely in a memory unsafe language and has hundreds of bugs, many being security vulnerabilities, found each month. In fact, there are so many bugs being found in the kernel, developers can’t keep up which results in many of the bugs staying unfixed for a long time. The kernel is also decades behind in exploit mitigations and many kernel developers simply do not care enough. Are you part of some community that gets access to Windows/MacOS kernel sources to search for vulnerabilities? Or are you getting reports about such vulnerabilities from Microsoft/Apple? I think not. I think that you're basing this argument on the amount of stuff you get to see online. Given that Linux Kernel lives under GPL that's expected. I'm not saying that Linux Kernel is holy and we should all bow and refrain from criticism. But you're judging it completely out of context.

wglb 6y ago
>I think that you're basing this argument on the amount of stuff you get to see online I think you are incorrect, and your comment is not really within the site guidelines. He has done security work on all that you mention above, and many others.
- inshadows 6y ago
  Thank you for ignoring my questions to the author and jumping right into tangent and appeal to authority. That assures me that author's claims are valid.
  - tptacek 6y ago
    This is a pretty funny reply, given the comment he was responding to. I'm comfortable with the answer I provided to you myself, though.
- wglb 6y ago
  One of the questions that I did not answer is >Really? My last sentence answers your question framed as an accusation. And it is not an appeal to authority, it is an appeal to published, verifiable experience. You can see this for yourself if you explore his comment history, or google for security research he published.

wglb 6y ago

>I think that you're basing this argument on the amount of stuff you get to see online I think you are incorrect, and your comment is not really within the site guidelines. He has done security work on all that you mention above, and many others.

inshadows 6y ago
Thank you for ignoring my questions to the author and jumping right into tangent and appeal to authority. That assures me that author's claims are valid.
- tptacek 6y ago
  This is a pretty funny reply, given the comment he was responding to. I'm comfortable with the answer I provided to you myself, though.
wglb 6y ago
One of the questions that I did not answer is >Really? My last sentence answers your question framed as an accusation. And it is not an appeal to authority, it is an appeal to published, verifiable experience. You can see this for yourself if you explore his comment history, or google for security research he published.