In this age of rampant AI and rampant AI-created malware, I was thinking
about how Debian handles security updates, or more specifically, how it
takes a comparatively long time to handle them. For example, I've seen
one bad exploit in KDE take at least a month before it was finally
pointed out to the Debian team and handled with a shipped security
patch.
This also got me thinking about if there is a way somehow for Debian to
coordinate and collaborate better with upstream developers in order to
ship even more stable packages than before. I think the problem has
always been lack of manpower for these things. I wonder if many upstream
developers just don't want to get involved with pushing software to
Debian these days simply because they find it too inconvenient and
clunky compared to, say, Arch. If manpower is the big problem though,
then maybe Debian could start a donation drive in order to get some
developers on board just for simple reliability fixes?
Anyway... These are just some ideas I was passing around in my head and
would love some input from you guys. Love what Debian does and offers.
Thank you for all the hard work that has been done so far. <3
---
Arnox, Sanctuary Administrator
