Comment

Comment by JoshTriplett

This conversation would be a good one to point them to to show that their policy is not just harmless point-proving, but in fact does cause harm.

For context, to the best of my knowledge the current approach of the Linux CNA is, in keeping with long-standing Linux security policy of "every single fix might be a security fix", to assign CVEs regardless of whether something has any security impact or not.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton