Brad Spengler
8K posts
Brad Spengler
@spendergrsec
President of @opensrcsec, developer of @grsecurity Personal account
Katılım Haziran 2011
4 Takip Edilen6.9K Takipçiler
Would love to see the in-depth analysis that led to this, which is a completely bogus 6.6 backport:
English
"ALSA: hda/conexant: fix some typos"
Stable-dep-of: b0e2333a2311 ("ALSA: hda/conexant: Fix missing error check for jack detection")
(just fixes some comment typos and renames a misspelled variable name)
kernel.org/doc/Documentat…
English
Simple adjustment from a month ago, no need to pull in almost 100 lines of new code to make a cherry-pick happen clean:
English
> the patch is well-hidden as a regular commit
paging dr @spendergrsec
itewqq@lyq_sqsp
@rootagi Yeah of course will drop that. But right now OSS is like a dark forest, and the original patch is well-hidden as a regular commit, so we’d rather wait a while (and also someone here is too lazy to prepare the blog lol)
English
Anyway, totally unrelated, was just thinking about the current CVE system where you have exploits coming out weeks before a CVE number or description:
@gregkh/T/#u" target="_blank" rel="nofollow noopener">lore.kernel.org/linux-cve-anno…
@gregkh/T/#u" target="_blank" rel="nofollow noopener">lore.kernel.org/linux-cve-anno…
English
Know how some brands get sold out to companies that run them into the ground via cutting corners and low quality, but a bunch of people still buy that brand anyway just because the name stays the same?
English