top | item 25968195 Libgcrypt maintainer rejects suggestion to use CI and ASan over etiquette 4 points| arthur2e5 | 5 years ago |twitter.com | reply 2 comments order hn newest [+] [-] arthur2e5|5 years ago|reply Linking the Twitter thread for background, since it matters to mention: 1) this is after libgcrypt 1.9.0's "textbook" heap overflow 2) libgcrypt 1.9.1, a security update, breaks --disable-asm builds on x86-64 because they also tried to do feature.Bug in question is https://dev.gnupg.org/T5279. Won't do any good to post anything there though. [+] [-] clarifier123|5 years ago|reply It's a well known fact that GnuPG maintainers are incompetent. My favorite example: https://dev.gnupg.org/T4592?utm_source=cryptography-dispatch...tl;dr one of the main GnuPG developers doesn't understand how SQLite works and because of that he's going to reimplement it.
[+] [-] arthur2e5|5 years ago|reply Linking the Twitter thread for background, since it matters to mention: 1) this is after libgcrypt 1.9.0's "textbook" heap overflow 2) libgcrypt 1.9.1, a security update, breaks --disable-asm builds on x86-64 because they also tried to do feature.Bug in question is https://dev.gnupg.org/T5279. Won't do any good to post anything there though.
[+] [-] clarifier123|5 years ago|reply It's a well known fact that GnuPG maintainers are incompetent. My favorite example: https://dev.gnupg.org/T4592?utm_source=cryptography-dispatch...tl;dr one of the main GnuPG developers doesn't understand how SQLite works and because of that he's going to reimplement it.
[+] [-] arthur2e5|5 years ago|reply
Bug in question is https://dev.gnupg.org/T5279. Won't do any good to post anything there though.
[+] [-] clarifier123|5 years ago|reply
tl;dr one of the main GnuPG developers doesn't understand how SQLite works and because of that he's going to reimplement it.