3 ms·
> we did that because we knew we could not ask the maintainers of Linux for permission, or they would be on the lookout for the hypocrite patches. For you secu
by MattGaiser 6y ago
> we did that because we knew we could not ask the maintainers of Linux for permission, or they would be on the lookout for the hypocrite patches.
For you security people out there, how do red teams handle this issue?
- shash 6y agoA red teamer answered above: https://news.ycombinator.com/item?id=26929797 https://news.ycombinator.com/item?id=26929797 Basically, warn in that you’re going to do it at some point in the future. Then do it in a time-frame of maybe 6 months or so from another ID. Maybe get some of the higher-ups to sign off (say Linus or Greg in this case) beforehand. At the very least, engage with the community...