linux-kernel - Re: [ 00/19] 3.10.1-stable review

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 19 Jul 2013 12:35:43 +0200
From:	Ingo Molnar <mingo@...nel.org>
To:	Sarah Sharp <sarah.a.sharp@...ux.intel.com>
Cc:	Thomas Gleixner <tglx@...utronix.de>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Guenter Roeck <linux@...ck-us.net>,
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	Steven Rostedt <rostedt@...dmis.org>,
	Dave Jones <davej@...hat.com>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	Andrew Morton <akpm@...ux-foundation.org>,
	stable <stable@...r.kernel.org>,
	Darren Hart <dvhart@...ux.intel.com>,
	"Hohndel, Dirk" <dirk.hohndel@...el.com>
Subject: Re: [ 00/19] 3.10.1-stable review


* Sarah Sharp <sarah.a.sharp@...ux.intel.com> wrote:

> On Thu, Jul 18, 2013 at 02:42:16AM +0200, Thomas Gleixner wrote:
> > If you can point me to a single instance of Linus "abusing" someone
> > who is not one of his trusted persons, who really should be able to
> > deal with that, or someone who did not provoke him to go into rant
> > mode, then I'm all on your side.
> 
> Not that I think this link will sway you, and this thread *should*
> really die down so we can discuss this at KS instead:
> 
> https://plus.google.com/+LinusTorvalds/posts/1vyfmNCYpi5
> 
> "So here's a plea: if you have anything to do with security in a distro,
> and think that my kids (replace "my kids" with "sales people on the
> road" if you think your main customers are businesses) need to have the
> root password to access some wireless network, or to be able to print
> out a paper, or to change the date-and-time settings, please just kill
> yourself now. The world will be a better place."
> 
> Linus asked someone to go kill themselves. [...]

No, he did not.

He, as he declared it in the first stentences of his post, was venting and 
cursing:

   Venting.

   I don't think I can talk about "security" people without cursing, so
   you might want to avert your eyes now.

I'm, as the author of several security patches, partly a distro "security 
person" too, and I was not offended, I took away the message from Linus:

don't "fix" perceived security threats by cumbersome security measures, 
because users will address that by creating even larger security threats:

   http://www.merseyworld.com/precinct/Apr99/prec8.html

Thanks,

	Ingo
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/