OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] The story of the Linux kernel 3.x...

valdis.kletnieksvt.edu
Date: Thu May 17 2012 - 14:33:17 CDT


On Thu, 17 May 2012 20:56:54 +0200, Adam Zabrocki said:

> Sorry I can not agree with you. Suse 12.1 is very new/fresh distribution
> so I don't see any point of delivering "old" binaries with new system.
> Still there is an open question about 3rd party vendors applications.

Exactly - it's all about the old 3rd party binaries.

> But if you look carefully for our discussion you will realize that other
> systems do not have problem with that so you are suggesting that only
> Suse don't have problems with clients?

Each distro has to decide for itself where to draw the line, and apparently
Suse 12.1 drew it differently than others. Keep in mind that Suse is targeting
itself as an "enterprise" distro. As such, they have to worry a lot more about
shops that run huge ancient creeping-horror software systems that often have
binaries that nobody really understands how to rebuild.

My point was just that it's not necessarily a "mistake" (as you put it) - each
distro has to make lots of these sorts of decisions every release cycle. Stay
compatible with old stuff, or ship new stuff? Decide to keep a compatibility
option around for one more release cycle, and you take heat for having old
stuff. Go the other way, and you end up shipping Unity. :)

> Additionally Marcus Meissner from the Suse team wrote interesting
> sentence about problem with 'old' binaries:

> "Nobody can actually point to an application that breaks."
> and "openSUSE 12.2 will have it disabled."

I'll bet a large pizza with everything but anchovies that once 12.2 ships,
somebody will find an application that breaks. But we'll probably never hear
about it, because nobody will want to admit having that creeping horror binary. ;)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
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=GmqX
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/