Hacker News new | ask | show | jobs
by IgorBog61650384 1963 days ago
I get that breaking packages is a bad user experience, but the Linux community at large should start paying more notice to security-first software engineering. Learn a little bit from Microsoft's experience - they made 100% backward compatibility their mantra for years, and look where it got them - a reputation as an unsecure platform with lots of exploits. Linux has many exploits too, its just a less popular platform for research by security researchers so less security bugs are found then Windows. But when those are found - its catastrophic like the last SUDO bug. They way to forward is to understand that even great software developers have bugs with security implementation, as writing reasoning about the correctness of software is very hard, and start implementing wide reaching mitigations by default. Control flow mitigations made implementing exploits on Windows much much harder, raising the bar of "bug to real-world exploit" significantly. Ubuntu setting CF protections to default will encourage many maintainers to finally fix their code.
1 comments

It also gained them a reputation as literally the only operating system that cares one whit for backwards compatibility, which is one of the reasons it has such high penetration, especially in enterprise. Linux explicitly has no kernel ABI guarantees, and Apple gleefully breaks shit between minor releases.