Torvalds Criticizes Security Approaches

Published: 18 January 2005 y., Tuesday
Linux creator Linus Torvalds had a few things to say this week about the way potential security issues are disclosed to fellow open sourcers. And it wasn't all good. His comments came as part of a mailing list discussion among kernel developers about creating a security contact point for people to use when potential kernel security issues arise. According to kernel developer Chris Wright,who began the discussion thread, kernel security issues are currently discussed in multiple locations, including the Linux Kernel mailing list, Kernel maintainers and the limited access vendor-sec mailing list. Membership to the vendor-sec mailing list is decided by consensus among existing members, which includes most of the major Linux distributions. In addition, security advisories discussed on the list are embargoed so vendors have time to prepare fixes before full public disclosure. Torvalds responded that the idea of a central contact point sounded like a good thing to have, as is maintaining limited access. However, he said he is strongly opposed to an embargo on the list for a variety of reasons. "I'd be very happy with a 'private' list in the sense that people wouldn't feel pressured to fix it that day," Torvalds wrote. "And I think it makes sense to have some policy where we don't necessarily make them public immediately in order to give people the time to discuss them. But it should be very clear that no entity (neither the reporter nor any particular vendor/developer) can require silence, or ask for anything more than 'let's find the right solution.'
Šaltinis: internetnews.com
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

Wincor Nixdorf expands consulting competence in business intelligence

Wincor Nixdorf is enhancing its consulting portfolio for the banking business. more »

PC/E Cash Management Guarantees Optimal Cash Management

Wincor Nixdorf is set to present its ProClassic Enterprise Cash Management software for effective and rational organization of end-to end cash management processes in banks at the Retail Delivery Show. more »

Yahoo CEO to resign

Yahoo said Jerry Yang will step down as chief executive as soon as the board finds a replacement. more »

Wincor Nixdorf: Opportunities even in the financial market crisis

Wincor Nixdorf AG has turned in the best year in its history. more »

Visa offers payWave contactless payment to transit operators

Visa Inc. is working with the Los Angeles transit authority to allow train, subway and bus riders to pay fares with Visa’s payWave-enabled contactless cards. more »

Google's phone debuts

Customers line up in New York City to be the first to buy Google's new G1 phone. more »

A safer internet for children

Children and teenagers are keen internet users - 12 to 15-year-olds spend at least three hours a day on screen - but are not always aware of the dangers: not just sites showing child pornography or violence but also the risk of bullying or grooming. more »

Switching off CO2

A European Commission study found that devices left on stand-by throughout the European Union in 2005 consumed the same amount of electrical energy as a country the size of Greece or Portugal in 2008. more »

European Commission launches “Study in Europe” website to promote European higher education

The European Commission has launched a new web portal called “Study in Europe” to promote the attractiveness of European Higher Education to students from other parts of the world. more »

Protecting Europe's children from internet dangers

With the increasing availability of the internet, children are being exposed more and more to illicit images and content. more »