Torvalds on security

Angry old man yelling at clouds or shrewd evaluator of priorities? You be the judge[1]. Myself? I’m on the side of shrewdness. Security, while important, is not the most important priority necessarily. It’s all about context, severity, and disruption.

And when a vulnerability requires physical access or root access or replacing microcode on the CPU before it can be leveraged, is it really a security vulnerability? No. No, it is not.

[1] http://www.zdnet.com/article/linus-torvalds-slams-cts-labs-over-amd-vulnerability-report/