On 10/23/26 9:36 AM, Andreas Røsdal wrote:
On Fri, Oct 23, 2026 at 8:54 AM Andrei Ionuţ Ştefan
<[email protected]
<mailto:[email protected]>> wrote:
This is the end of the thread, Quite a legendary end to discover a
security vulnerability
in Nordstjernen. The thread was cool for 5-6 days, now its better
off if we end the thread now with the verdict:
Nordstjernen is NOT READY to ship into Debian. The security
vulnerabilities and policy application need
to be resolved first and foremost before this gets shipped out to
Debian.
Sincerely,
Ştefan Andrei Ionuţ
Ok, I appreciate all the feedback and reviews from this community. Still
I feel that the review from Theodore Tso is highly biased, and I think
this is because Theodore Tso is employed by Google, which makes a
competing web browser, Google Chrome. Therefore in my opinion the
Nordstjernen web browser was not given a fair chance by the Debian
community, and I will focus on other Linux distributions which does not
have Google-/corporate-biases like Debian does in this instance.
I'd accept the review with grace. That's not how the megacorps work.
Browsers are a huge attack surface and it historically took large teams
to maintain them. Maybe with AI this is now easier, but I'd still accept
the feedback. I'd rather have read a rebuttal to Ted's points.
Disclaimer: Yes, I am also employed by Google. No, I don't have an axe
to grind because of this.
And Andrei's first contribution to this entire mailing list has been to
this thread. He definitely seems like he has an axe to grind. I'm very
much put off by his discussion style as well.
Kind regards
Philipp Kern
