linux-kernel - Re: [ 00/19] 3.10.1-stable review

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20130718154814.GA5440@xanatos>
Date:	Thu, 18 Jul 2013 08:48:14 -0700
From:	Sarah Sharp <sarah.a.sharp@...ux.intel.com>
To:	Thomas Gleixner <tglx@...utronix.de>,
	Linus Torvalds <torvalds@...ux-foundation.org>
Cc:	Ingo Molnar <mingo@...nel.org>, Guenter Roeck <linux@...ck-us.net>,
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	Steven Rostedt <rostedt@...dmis.org>,
	Dave Jones <davej@...hat.com>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	Andrew Morton <akpm@...ux-foundation.org>,
	stable <stable@...r.kernel.org>,
	Darren Hart <dvhart@...ux.intel.com>,
	"Hohndel, Dirk" <dirk.hohndel@...el.com>
Subject: Re: [ 00/19] 3.10.1-stable review

On Thu, Jul 18, 2013 at 02:42:16AM +0200, Thomas Gleixner wrote:
> If you can point me to a single instance of Linus "abusing" someone
> who is not one of his trusted persons, who really should be able to
> deal with that, or someone who did not provoke him to go into rant
> mode, then I'm all on your side.

Not that I think this link will sway you, and this thread *should*
really die down so we can discuss this at KS instead:

https://plus.google.com/+LinusTorvalds/posts/1vyfmNCYpi5

"So here's a plea: if you have anything to do with security in a distro,
and think that my kids (replace "my kids" with "sales people on the
road" if you think your main customers are businesses) need to have the
root password to access some wireless network, or to be able to print
out a paper, or to change the date-and-time settings, please just kill
yourself now. The world will be a better place."

Linus asked someone to go kill themselves.  That someone was anyone
involved in distro security, specifically OpenSuse.  I think that
qualifies as "not one of his trusted persons".  I'll leave it up to you
whether you think that statement was justified or civil.

I don't think someone in a position of power should be encouraging
developers to commit suicide, even if they did make a mistake.  The
Portland open source community has already had to deal with two
developer suicides this year (Igal Koshevoy and Matthew):

http://stumptownsyndicate.org/2013/04/09/goodbye-igal/

I personally don't want to be responsible for anyone else contemplating
suicide, even because of an obviously sarcastic "joke".  I don't joke
about suicide.  I would appreciate it if other developers refrained from
joking about it as well.

Sarah Sharp
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/