Reddeet
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
lemmyreader@lemmy.ml to Linux@lemmy.mlEnglish · 1 year ago

If all kernel bugs are security bugs, how do you keep your Linux safe?

www.zdnet.com

external-link
message-square
64
fedilink
114
external-link

If all kernel bugs are security bugs, how do you keep your Linux safe?

www.zdnet.com

lemmyreader@lemmy.ml to Linux@lemmy.mlEnglish · 1 year ago
message-square
64
fedilink
Since February, there've been 800 newly assigned CVEs. Your job? Update your main Linux distro more often.
  • bloodfart@lemmy.ml
    link
    fedilink
    arrow-up
    21
    arrow-down
    1
    ·
    1 year ago

    That’s a crazy “if”

    • Galli [comrade/them]@hexbear.net
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 year ago

      “if” gcc had a Ken Thompson hack how do you secure checks notes anything

      • pmk@lemmy.sdf.org
        link
        fedilink
        arrow-up
        3
        ·
        1 year ago

        I’m genuinely worried sometimes that a Ken hack has been introduced. I don’t know by who, but possibly some government agency. Then again, we also have a Minix system built into the CPU doing god knows what and we just accept that.

        • acockworkorange@mander.xyz
          link
          fedilink
          arrow-up
          1
          ·
          1 year ago

          We do?

          • pmk@lemmy.sdf.org
            link
            fedilink
            arrow-up
            2
            ·
            1 year ago

            https://itsfoss.com/fact-intel-minix-case/

            • acockworkorange@mander.xyz
              link
              fedilink
              arrow-up
              1
              ·
              1 year ago

              Ooh that’s not creepy at all. Also, damn you BSD license.

    • taladar@sh.itjust.works
      link
      fedilink
      arrow-up
      3
      arrow-down
      4
      ·
      1 year ago

      That is actually perfectly reasonable assumption to make in the absence of resources to determine the opposite, which would probably be many times the resources needed to actually fix the bug.

      • Nibodhika@lemmy.world
        link
        fedilink
        arrow-up
        7
        arrow-down
        1
        ·
        1 year ago

        There are lots of things the Kernel controls that can have non security related bugs, e.g. controller with the wrong mapping https://github.com/torvalds/linux/commit/9131f8cc2b4eaf7c08d402243429e0bfba9aa0d6

        It’s a wild assumption to claim “All bugs in the Linux kernel are security issues”, without any backing, whoever is making that claim needs to provide evidence since the default position for any program is that there are bugs that are not security issues.

      • bloodfart@lemmy.ml
        link
        fedilink
        arrow-up
        2
        arrow-down
        2
        ·
        1 year ago

        defend one out there assumption with another, i guess.

        who can tell if sidewinder force feedback (11684) is a security bug or just one that affects people using old joysticks. better treat it with all the seriousness of xv just to be sure!

      • redlue@startrek.website
        link
        fedilink
        arrow-up
        1
        arrow-down
        2
        ·
        edit-2
        1 year ago

        Removed by mod

Linux@lemmy.ml

linux@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@lemmy.ml

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

  • Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
  • No misinformation
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • !opensource@lemmy.ml
  • !libre_culture@lemmy.ml
  • !technology@lemmy.ml
  • !libre_hardware@lemmy.ml

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1.21K users / day
  • 4.07K users / week
  • 8.27K users / month
  • 16.8K users / 6 months
  • 3 local subscribers
  • 54.1K subscribers
  • 5.91K Posts
  • 139K Comments
  • Modlog
  • mods:
  • AgreeableLandscape@lemmy.ml
  • nooter692@lemmy.ml
  • MarcellusDrum@lemmy.ml
  • Arthur Besse@lemmy.ml
  • Cyclohexane@lemmy.ml
  • d3Xt3r@lemmy.nz
  • BE: 0.19.8
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org