Hacker News new | ask | show | jobs
by biot 3879 days ago
In relation to mitigations, what are the "Loudmouth Linus" and "recent article in Washington Post" references about?
3 comments

http://www.washingtonpost.com/sf/business/2015/11/05/net-of-...

Linus, in one of his less bright moments, called the OpenBSD team a bunch of masturbating monkeys [1]. Unfortunately, the Linux kernel's conspicuous lack of attack mitigation measures (compared to Win/Mac/OpenBSD/etc) does make one wonder who has been masturbating over the past few years.

[1] http://article.gmane.org/gmane.linux.kernel/706950 (from the article)

(to be clear: I like and use Linux a lot... but Linus's disregard for security is becoming a liability)

http://www.washingtonpost.com/sf/business/2015/11/05/net-of-...

Article could have been good but is a bit too sensationalist, e.g. pointing out that Ashley Madison runs Linux only to admit that it had nothing to do with their security breach -- OK, so why did you mention it, then?

(In truth, kernel security rarely matters for servers, because the application is usually the first line of defense. I say this as someone who runs one of the rare services where kernel security does matter, so yeah, I wish Linux did more hardening, but the article is misleading.)

Torvalds called openbsd devs "masturbating monkeys" for their focus on security. Wapo had an article on linux security the othe day.