(no title)
fiter | 4 years ago
I believe Greg was not saying Aditya was both incompetent and malicious. Greg was saying incompetent or malicious. The incompetence stemmed from how Aditya handled his static analysis patches: seemingly no manual review and no explicit statement that the patches were from a tool (which is apparently standard procedure).
staticassertion|4 years ago
Most of Aditya's patches were legitimate. Multiple upstream developers have confirmed this:
> https://lore.kernel.org/lkml/CACRpkdbw_sF2FO0jjq47KStUjvhKvW...
Other kernel maintainers have already picked up on this.
> You, and your group, have publicly admitted to sending known-buggy patches to see how the kernel community would react to them, and published a paper based on that work.
Here is a direct quote from Greg where he falsely alleges that Aditya is responsible for the previous work.
> Now you submit a new series of obviously-incorrect patches again,
Many of the patches are correct - see the above link where one maintainer points this out.
> So what am I supposed to think here, other than that you and your group are continuing to experiment on the kernel community developers by sending such nonsense patches?
Another false allegation that Aditya is experimenting on the kernel, attributing malice.
> You were not asking for help, you were claiming that these were legitimate fixes, which you KNEW to be incorrect.
Many were legitimate. Again, a false accusation from Greg.
Then Greg goes on to attack him some more, instead of just explaining things to him, like "Hey, in the future can you add 'found by tool xyz'". In other mailing lists kernel maintainers point out that that would have been the sane response, not going to bother to link that.
> Our community welcomes developers who wish to help and enhance Linux. That is NOT what you are attempting to do here, so please do not try to frame it that way.
In fact, that is exactly what Aditya was trying to do.
> Our community does not appreciate being experimented on, and being "tested" by submitting known patches that are either do nothing on purpose, or introduce bugs on purpose.
Aditya did no such thing.
Greg's response is indefensible. It's just littered with insults and attacks, and factually incorrect allegations against a legitimate security researcher.
unknown|4 years ago
[deleted]