Re: Estimate for the total number of exploitable bugs in large linux distro?

2017-07-15 Thread Ryan Carboni
https://arstechnica.com/security/2016/09/linux-kernel-security-needs-fixing/ Based on the number of concurrent discovered bugs, at least a few. Statistical techniques won't work when it is only discovered bugs. https://en.wikipedia.org/wiki/Selection_bias But the fact that severe bugs are in a

Re: Estimate for the total number of exploitable bugs in large linux distro?

2017-07-15 Thread juan
> and not to mention the coming tsunami of grossly insecure devices > that will be hitched to the Internet of Things. ah cute pentagon propangada - the terrist are gonna attack the fridges that the fucktards connect to the interwebz > that will affect the safety and

Re: Estimate for the total number of exploitable bugs in large linux distro?

2017-07-15 Thread Steve Kinney
On 07/15/2017 04:54 AM, Georgi Guninski wrote: > On Fri, Jul 14, 2017 at 10:22:32AM -0400, John Newman wrote: >> Bugs that already have some PoC or other code to exploit the issue? Or >> the sum total of all exploitable bugs, discovered and undiscovered? >> >> The first case should be relatively

Re: Estimate for the total number of exploitable bugs in large linux distro?

2017-07-15 Thread Ryan Carboni
https://arstechnica.com/security/2016/09/linux-kernel-security-needs-fixing/ The Linux kernel today faces an unprecedented safety crisis. Much like when Ralph Nader famously told the American public that their cars were "unsafe at any speed" back in 1965, numerous security developers told the

Re: Estimate for the total number of exploitable bugs in large linux distro?

2017-07-15 Thread Georgi Guninski
On Fri, Jul 14, 2017 at 10:22:32AM -0400, John Newman wrote: > Bugs that already have some PoC or other code to exploit the issue? Or > the sum total of all exploitable bugs, discovered and undiscovered? > > The first case should be relatively small with a very current > release.. the second

Re: Estimate for the total number of exploitable bugs in large linux distro?

2017-07-14 Thread John Newman
On Fri, Jul 14, 2017 at 12:30:56PM +0300, Georgi Guninski wrote: > What is an estimate for the total number of exploitable bugs in large > linux distro? Bugs that already have some PoC or other code to exploit the issue? Or the sum total of all exploitable bugs, discovered and undiscovered? The