On Fri, 2026-10-23 at 17:59 +0200, Tomasz Torcz wrote: > On Fri, Oct 23, 2026 at 08:41:40AM -0700, Adam Williamson wrote: > > On Fri, 2026-10-23 at 15:44 +0200, Marius Schwarz wrote: > > > This may be a good starting point to reconsider handling security > > > differently in the light of AIs producing exploits, faster than > > > you can > > > imagine. > > > > I'd say it's rather exactly the opposite. There are so many > > security > > fixes now that it's not practical to treat them all as "special". > > That's what Linus Torvalds was saying about the kernel years ago. > A bug is a bug, security or not, no reason to treat the latter > specially.
He was wrong then and remains wrong now. There are classes of security bugs (RCEs) that are definitely not like any other bug, as they allow an attacker to take over your machine. There is a whole science around threat assessment and risk management, ask any insurance company ... Best, Simo. -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
