Slashdot Mirror
2.4 Kernel Maintainer Marcelo Tosatti Interviewed
Jeremy Andrews writes "KernelTrap has an interview with Marcelo Tosatti. Marcelo became the maintainer of the 2.4 stable kernel when he was 18 years old, releasing his first kernel, 2.4.16, on November 26'th of 2001. Two years later, he recently released 2.4.23 and plans to soon put the 2.4 stable kernel tree into maintenance mode, only addressing bugs and security issues. Living in Brazil, Marcelo currently works for Cyclades Corporation. In this interview he looks at how he became the 2.4 maintainer, the challenges involved, and brings us up to date with the current status of the 2.4 kernel."
Don't show his photo to your boss as you talk about the 2.4 kernels you're probably still running. The kernel maintainer for your corporate servers is a 20 year old guy who was 18 when he started maintaining. Whoah.
In the corporate world, even if there was some kind of genius kid really running the show, he'd be hidden behind grey haired puppets so that it didn't look like some genius kid was really running the show.
Kudos to Marcello, even though child labour laws (if he was paid to work with the ISP in Brazil when he was 13 years old) and human rights issues might get a mention if the press could ever see beyond Linus as a Linux hacker.
Conversion Rate Optimisation French / English consultant
And what "real platform" would that be? Hmmm?
Lets' see if you can do this. Better yet, let's see if you are even asked to do this.
JA: During the 2.4.23 release cycle, a bug was fixed in the do_brk() function. This bug was recently exploited in a high profile break-in of four Debian Project Linux servers. Why was 2.4.23 not released sooner when this bug was first fixed?
Marcelo Tosatti: When I first applied the fix (sent from Andrew Morton), I didn't realize it was an exploitable bug (I understood it could crash the box).
This guy just took responsibility for sitting on a known fix, which directly led to Debian compromise.
It also led to a rapid patch cycle all over the place, as opposed to a more stable and controlled cycle, since everyone who saw Andrew Morton's patch could research the vuln and create the exploit.
This delay gave blackhats a lot more time than whitehats.
Perhaps this argues strongly for closed security bug reporting a la OIS' "responsible disclosure" model.
I became the official maintainer of my brother's Playboy collection.
During my stewardship, I too put the collection in maintenance mode, had to deal with security problems, and I certainly issued several...er..releases.
20 years old, wife, kernel maintainer, kernel job, and the hair... damn him!
This second post actually made me laugh. Thank you.
Not a bad start.
Marcello jumped the shark at 19.
I hope you'll do the same when something goes wrong in your area of responsibility.
This delay gave blackhats a lot more time than whitehats.
Not true. Blame the whitehats for not looking at the patches closely enough.
Perhaps this argues strongly for closed security bug reporting a la OIS' "responsible disclosure" mode
No. That doesn't help in cases like this where the security impact of a bug isn't recognized at the time of bug reporting.
I worked with Marcelo at Conectiva (man, I missed that place but...) and that's *not* his real hair :) :-D
He probably just went to a hair stylist and made that... thing
I swear I never imagined Marcelo doing this kind of stuff but he's a kernel developer so you can expect anything!
Scientia est Potentia
When will he fix the critical bugs in the system so we can actually use it? Our company runs on Windows NT 3.5(!) SP2 and it has had an uptime of now 1500+ days on some of our main server. Our server is an 8 Way 486 50Mhz machine with 72MB of RAM. It has been smoothly been running since we installed it in December 1995, however its rapdidly increasing maintenance costs are damaging us. The company who gave us this machine has gone out of business.
We are now concidering wether to get a Windows 2003 server, Solaris 10 or a Linux Enterprise server. Concidering the high profile bugs that exploited key Linux websites, and the increasing ligitation against it, we do not think we should use Linux in such an environment where we need uninterrupted operation. We do not need kernel panics, root exploits, and we ceraintley don't want to put our precious source code at risk of espenage because of the Legal bindings of Linux.
Sure, you can moderate this -1, troll or flamebait if the truth offends you (Which shouldn't, your very pathetic if it does), but if our server was to go down for even a SECOND, we would go out of business! We need Nine 9's reliabillity, and Open Source can only proivde 2 to 3 9's at best.
is probably a misplaced concern for a guy like this.
He's working at an ISP, not a sweat shop or factory floor (what most child labor laws were designed to prevent, if I recall my history correctly).
He's working with his head, not his back... bully for him (I can think of a few places that could use a teenage prodigy or two).
Even if a man chops off your hand with a sword, you still have two nice, sharp bones to stick in his eyes.
and don't go into detail about all the "cleaning up" of the filesystem you had to do.
Even if a man chops off your hand with a sword, you still have two nice, sharp bones to stick in his eyes.
Not a Linux expert, but it sounds weird to put 2.4 in a feature freeze mode "soon" (whatever that means), with 2.6 just released days ago ... was the timeframe similar between 2.2 and 2.4?
I'm in the final stages of the recruitment and hiring process for a silicon valley startup. I live in NY, and I'd be doing "Professional Services" for their NY clients.
After a series of phone interviews, they told me "Our founder and CTO is going to be in NYC. We'll set up a face to face meeting."
My hair is closely cropped - mostly because I'm quite bald on top, and if I let it grow at all I look like Krusty the Clown. I put on my best navy blue interview suit, iron a really nice shirt, have my wife pick a tie, etc. I hop the train to Manhattan and meet my (hopefully) future boss.
He's got dreadlocks and a goattee!
During the interview we were chatting about some of the people that I had spoken with on the phone. He mention someone as having very long hair. That gave me the opportunity to say "And here I am wearing my best interview suit!" that got a good laugh from him. "That is East Coast vs West Coast, I guess." was his reply.
I run a very big (2 HT CPUs, 4GB RAM, 620 GB RAID5, 2x 1GBit links) file-server and all 2.4 kernels (.19-.22) weren't able to run the thing stably for more than 1 week, under heavy I/O load not more that 2 days.
Changing to the -aa tree helped and that thing is now up, stable and fast for past 4 months.
The problem lies in still unmerged code for highmem and slabcache reclaim (check /proc/slabinfo or use slabtop), which is in the -aa tree for ages.
I reported that to Marcello, but he seemed very uninterested in tracking down (many, many thanks to Andrea and Rik, who helped) and applying those particular fixes in the -aa tree.
I'm in the final stages of the recruitment and hiring process for a silicon valley startup.
:) Did it work, btw?
Perhaps it's time to update your sig.
"I either want less corruption, or more chance
to participate in it." -- Ashleigh Brilliant
He got the job mostly because he wanted to. See, I'm pretty sure he had options, like spending the rest of his school days (in Brazil, school usually begins at 7 AM and ends by 12:30PM) playing soccer or videogames but he chose to learn C instead.
Child labour laws protect those kids who do not have an option and, clearly, that was not the case.
So it was Linux that started this trend!
my complaint is echoed by MILLIONS.
-I like my women like I like my tea: green-
Io: Marcelo--sai qualche e la differenza tra giocare con i Lego e fare l'amore?
Marcelo: No.
Io: Continua giocare con i Lego!!
I found it.
i don't why i misread it as "2.4 kernel maintainer marcelo tosatti died"....
for once at least i'm wishing i don't prove to be psychic....
Is the sun going to explode?
Those aren't dreadlocks... those are posix threads! Or deadlocks. Or ... or...
"Can of worms? The can is open... the worms are everywhere."
40?
What's the problem with dreadlocks? We are in Brasil. Not all persons here need to use a suit. It maybe really on Sao Paulo but not in Rio for example.
Would you trust your business to an 18 year old hippie with rasta curls, living in a terrorist development country?
I metamodded this as unfair. Not because it is unfair, but because I have seen far too many negative moderations used in the wrong way.
The moderator who modded this as troll was completely in the right. I'm sorry about that. However, too many times I've been modded as off-topic, flamebait, or overrated, because I did not agree with popular opinion. I feel its time to do away with the moderators who spend too much time modding people down and not enough time modding people up.
Again, I'm sorry. Hopefully soon I won't be so sore about it, and I'll pick on the mods that are truely in the wrong.
"Derp de derp."