Comments by "dkosmari" (@dkosmari) on "Severe (9.9 / 10) Linux Vulnerability Announced, Details Kept Secret" video.

  1. Mald and dilate. It's getting fixed, unlike your Mac and Windows vulnerabilities, that stay in place until the NSA decides to switch over to newer ones.
    9
  2. It's even easier to add security holes in proprietary software. If that convoluted backdoor was implemented in a proprietary Microsoft DLL, we might have never known about it.
    5
  3. If Rust programmers spent half the time they proselytize in actually coding a kernel, they'd be done by now.
    5
  4. Simone said it's "been running on everything for 20 years", but systemd is only 14 years old.
    4
  5. It's not so much a design problem; it's a lack of funding and interest for the fundamental components of the system. Some old software, despite "working fine," is so ugly and convoluted, there's no saving, you're better off just writing a new implementation from scratch. See fontconfig for instance.
    3
  6. Nobody knows what the vulnerability is, and there's no fix available yet.
    3
  7. The big issue isn't the bug itself, but the attitude of the devs that refuse to acknowledge or fix the problems. We're lucky Simone would rather put them on blast for everyone else's benefit, instead of just giving up and selling the exploit on the black market.
    2
  8. Docker is only 11 years old, it does not match the description of "running on everything for the past 20 years."
    2
  9.  @ka9dgx  So adding a new layer of abstraction will solve the problem?
    1