netdev - Re: Reporting bugs and bisection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <bd6139dc0804161405j28470914u488568b565b68a0b@mail.gmail.com>
Date:	Wed, 16 Apr 2008 23:05:17 +0200
From:	"Sverre Rabbelier" <alturin@...il.com>
To:	"Adrian Bunk" <bunk@...nel.org>
Cc:	git@...r.kernel.org, linux-kernel <linux-kernel@...r.kernel.org>,
	"James Morris" <jmorris@...ei.org>,
	"Al Viro" <viro@...iv.linux.org.uk>,
	"Andrew Morton" <akpm@...ux-foundation.org>,
	"Willy Tarreau" <w@....eu>, david@...g.hm,
	"Stephen Clark" <sclark46@...thlink.net>,
	"Evgeniy Polyakov" <johnpol@....mipt.ru>,
	"Rafael J. Wysocki" <rjw@...k.pl>,
	"Tilman Schmidt" <tilman@...p.cc>, Valdis.Kletnieks@...edu,
	"Mark Lord" <lkml@....ca>, "David Miller" <davem@...emloft.net>,
	jesper.juhl@...il.com, yoshfuji@...ux-ipv6.org, jeff@...zik.org,
	netdev@...r.kernel.org, "David Newall" <davidn@...idnewall.com>
Subject: Re: Reporting bugs and bisection

On Wed, Apr 16, 2008 at 10:53 PM, Adrian Bunk <bunk@...nel.org> wrote:
>  To avoid any misunderstandings:
>
>  This is not in any way meant against you personally.

Thanks for pointing it out, I wasn't quite sure, but assumed that :).

>  But saying things like " X% of your commits introduced bugs" is not a
>  friendly thing, and wrong data could be quite hurting.

Yes, it could be, and I agree that conclusions shouldn't be based on
the details, but on the bigger picture. Also, I think it should (at
first) be used mainly as an indicator, of where attention might be
required. I mean, if it points out that one contributor almost always
commits buggy code, you don't have to present them with those
statistics right away. Instead you can ask the program where it bases
it's conclusions on, and research them yourself. If it does indeed
turn out that they are slacking that much you have good ground to have
a talk with them.

>  Especially in the open source world where much motivation comes from
>  people being proud of their work.

Yes, that is very true, I very much agree with that, but on the other
hand it might also point out contributors that are particularly
skillful in a certain section that was previously not noted. As with
all statistics, it's up to interpretation, misinterpreting statistics
could -always- have bad effects.

>  Even correct data can do harm.
>
>  And bad data can have really bad effects.

True, both, but as said, if properly interpreted it could be very useful.

Cheers,

Sverre Rabbelier
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html