Slashdot Mirror

← Back to Stories (view on slashdot.org)

The Case For Full Disclosure In The Linux Changelog

Posted by timothy on from the asking-and-telling dept.

titurel writes: "This article on SecurityFocus takes up some interesting thoughts about how Alan Cox's choice not to unveil securitychanges in the kernel changelog could affect other developers." And Jon Lasser is no security dummy -- Along with Jay Beale, he's one of the guys behind Bastille Linux, and the author of the excellent Think Unix.

3 of 234 comments (clear)

  1. Time to switch to OpenBSD by Anonymous Coward · · Score: 0, Troll

    Well, since I have no way to know if security holes
    exist in the Linux kernel, I will have to switch
    to another operating system that I can verify problems
    with. Obviously if people think Linux can be run
    in a production environment before, it won't be now.
    Good thing for the BSDs at least. :)

  2. Why is posting changelog a dmca violation? by an_mo · · Score: 0, Troll

    Can someone explain this plain and simple?

  3. Re:For God's sake by trilucid · · Score: 0, Troll


    I'm your worst nightmare.

    I guess I really don't give a damn about karma ;).