Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> To me it sounds plausible that the design goal of the Linux CNA is to show that CVEs don't meaningfully apply to the Linux kernel.

I think it's hostile in nature. The core kernel devs have a horrible attitude toward security vulnerabilities.



Yes, my original wording was "to make the CVE system burn", but that got lost during my tone-down edits.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: