Comment by rvz

17 hours ago

Another one.

Linux is falling apart faster than it can assign these CVEs.

Falling apart? You mean getting stronger? Every single one of these is an existing hole being patched. It isn't making new holes

  • Government agencies probably already have half of these exploits in their private toolbox for years now. Finding and patching them is good, but there probably needs to be some systematic change to prevent them rather than just patching bugs when they get found.

  • As other people said in this thread: so many devices won't be patched. And that can easily lead to users and manufacturers moving away from Linux. Linux is in a glass house.

  • I remember when people used to joke with Windows security and something like that would never happen on Linux, well..

Linux is "falling apart" because it's the highest-profile open source project people can point LLM agents at to find CVEs. It'll come out the other end of this hardened by all of the attention it's getting, but the next few months/years will be... bumpy.

perhaps this will lead to better AppArmor and SELinux defaults?

  • People will just turn SELinux off rather than have to go through the horrible tooling when it breaks a regular use case.

    • It is enabled by default on Android, and only developers can change it temporarly via an ADB session.

    • I do think SELinux is a good example of how robust software with poor UX/DX gets undermined by that poor UX/DX. Although I do wonder if AI can help with it?

      1 reply →

How's BSD doing? How about Amazon Linux?