Egregoros

Signal feed

Timeline

Post

Remote status

Context

8
@phnt @jn @ska Well… sure and it's what I do for my packages but then, how much time for reviewing the diffs between LLVM/Firefox/… versions?

It's the kind of stuff where if you'd apply it, it would be *smaller* than BSDs. (As proven by lack of code-review of OpenSSL during heartbleed era, xz-utils during Jia Tan, …)
Like probably would be 9Front-sized.
@lanodan @jn @ska I know, I've tried. Similarly I was really annoyed at gkh's decision to file CVEs for absolutely benign things in the kernel out of spite for the system. I know that the system sucks, but me going through 150 CVEs per-release to figure out if they actually matter isn't a good solution either.

Replies

0
No replies yet.