新聞中心
在Linux 2.6.25.10穩(wěn)定版發(fā)布的郵件列表上,一位開(kāi)發(fā)者提到了關(guān)于修正bug安全影響的披露政策,并再三的強(qiáng)調(diào)安全。Linus Torvalds回貼中表示,安全漏洞臭蟲(chóng)只是眾多臭蟲(chóng)的一種,過(guò)于拔高或贊美安全臭蟲(chóng)的修正者是走在錯(cuò)誤的方向上。Linus大神稱那幫整天炫耀 OpenBSD安全性的家伙其實(shí)是一群自慰的猴子,好像除了安全性,沒(méi)有其它東西能讓他們興奮起來(lái)。安全是重要的,但不等于一切。

讓客戶滿意是我們工作的目標(biāo),不斷超越客戶的期望值來(lái)自于我們對(duì)這個(gè)行業(yè)的熱愛(ài)。我們立志把好的技術(shù)通過(guò)有效、簡(jiǎn)單的方式提供給客戶,將通過(guò)不懈努力成為客戶在信息化領(lǐng)域值得信任、有價(jià)值的長(zhǎng)期合作伙伴,公司提供的服務(wù)項(xiàng)目有:域名注冊(cè)、網(wǎng)站空間、營(yíng)銷(xiāo)軟件、網(wǎng)站建設(shè)、普安網(wǎng)站維護(hù)、網(wǎng)站推廣。
原文:
From: Linus Torvalds
Subject: Re: [stable] Linux 2.6.25.10
Newsgroups: gmane.linux.kernel
Date: 2008-07-15 16:13:03 GMT (18 hours and 8 minutes ago)
On Tue, 15 Jul 2008, Linus Torvalds wrote:
>
> So as far as I'm concerned, "disclosing" is the fixing of the bug. It's
> the "look at the source" approach.
Btw, and you may not like this, since you are so focused on security, one
reason I refuse to bother with the whole security circus is that I think
it glorifies - and thus encourages - the wrong behavior.
It makes "heroes" out of security people, as if the people who don't just
fix normal bugs aren't as important.
In fact, all the boring normal bugs are _way_ more important, just because
there's a lot more of them. I don't think some spectacular security hole
should be glorified or cared about as being any more "special" than a
random spectacular crash due to bad locking.
Security people are often the black-and-white kind of people that I can't
stand. I think the OpenBSD crowd is a bunch of masturbating monkeys, in
that they make such a big deal about concentrating on security to the
point where they pretty much admit that nothing else matters to them.
To me, security is important. But it's no less important than everything
*else* that is also important!
Linus
網(wǎng)站名稱:Linus:吹噓OpenBSD安全性的開(kāi)發(fā)者是一幫自慰的猴子
地址分享:http://fisionsoft.com.cn/article/ccspgsd.html


咨詢
建站咨詢
