3 ms·
Or maybe it's ideologically motivated that other groups only identify certain bugs as security bugs?
by inigyou 3mo ago
Or maybe it's ideologically motivated that other groups only identify certain bugs as security bugs?
- insanitybit 3mo agoMake a case then. My case is that Greg has, for decades, said that he hates the CVE system and rejected it and that the kernel objectively labels CVEs based on fixes (not the standard at all, CVEs are for vulns), etc. I can point to so many objective pieces of evidence to support my claim. You seem to have a vague, leading question. If you want to say something about "other groups" or ideologies, go ahead.
- inigyou 3mo agoMalicious compliance is compliance.
- insanitybit 3mo agoI don't know what you're trying to say at all. But no, the kernel is objectively not compliant because they label fixes with CVEs and not vulnerabilities. But even if they were compliant... what would that have to do with anything? Feels like a non sequitur. It's very hard to figure out what point you're trying to make.
- inigyou 3mo agoEvery bugfix implies a bug.
- insanitybit 3mo agoI'm going to graciously give you one last chance to actually say something of substance before I stop responding entirely.