3 ms·

Also funny they never show Debian in those tests/videos.

• juujian 5mo ago
  How so?
  • deleted 5mo ago
    [deleted]
    • deleted 5mo ago
      [deleted]
    • deleted 5mo ago
      [deleted]
• cperciva 5mo ago
  Debian is probably the best of all the Linuxes, but still suffers from split-brain: If patches are sent upstream first, Debian can't start digesting them until they're already public. With FreeBSD there's never any question of "who should this get reported to".
  • JoshTriplett 5mo ago
    > Debian can't start digesting them until they're already public Not sure what you mean by this. Debian is able to handle coordinated disclosures (when they're actually coordinated), and get embargoed security updates out rapidly without breaking the embargo. Is there some other aspect of this that you're referencing?
    • pavon 5mo ago
      The fact that the kernel security team has decided coordinating disclosure is someone else's problem so it happens inconsistently.
    • cperciva 5mo ago
      The key words there are "when they're actually coordinated". Debian doesn't own the Linux kernel, and the kernel developers don't bother with coordinated disclosure, so the happy path of coordinated disclosure only happens when reporters make the non-obvious choice of reporting vulnerabilities to people other than the maintainers.
      • JoshTriplett 5mo ago
        Fair enough; yeah, at the point where the embargo failed, it was important that patches get to distros as fast as possible in order to ship the fixes.
  • goodpoint 5mo ago
    No, Debian has its own security team and receives embargoed vulnerabilities and patches.