fguerraz

If it’s freed it can be reallocated, so then you have pointers to the same area of memory used for completely different data structures, and this can go very wrong

Can we kick SMB implementations out of the kernel please? If not, can we please get PHP mainlined in the kernel?

I find it incredibly naive that they’d hope it would not leak after weeks/months of embargo.

Being given advance notice of an upcoming security fix is an immense privilege, organisations should turn around quickly when given such information, they shouldn’t be given more than a couple of days to update IMHO, it’s not like the rest of the world can wait.

Any legit use case for using SSH over Tor?

In the end, it’s the same answer as to why humans do it: incentives.

Why do we commit financial fraud and destroy the planet? Because there is only one goal that counts: making more money. It’s the only measure of success for powerful people, they are powerful because of it.

The previous design was piss-poor

If it’s being exploited “in the wild”, it means someone has already found how to chain it, otherwise what would be the point?

I'm sure there are people in this category, but there's also the other category who just want their stuff to work, and now can as AI to do it, without having to follow stupid processes (try contributing to QT...) or arguing for months.

These maintainer who’ve held the sacred fire for years…

I mean, they're from Scotland, the watch would have to be pretty water resistant to survive more than one day...

The strong language is fully appropriate given the circumstances.

In 2006, in my first job after uni in France, I wrote a toy PaaS system called CASIMIR based on qemu. It was a lot of fun, I could via a web UI launch VMs, access them via VNC, etc..

I've always had a lot of admiration for Fabrice Bellard, I always wished I was as good an engineer as he is.

Moving to a closed development model => opensource is just a gimmick, especially with a BSD licence.