1 |
On Fri, Nov 06, 2020 at 10:14:30AM +0100, Michał Górny wrote: |
2 |
> On Fri, 2020-11-06 at 08:21 +0100, Agostino Sarubbo wrote: |
3 |
> > Hello all, |
4 |
> > |
5 |
> > 6 months have been passed after the CI system started to file bug reports. |
6 |
> > ~ 4700 bugs have been submitted |
7 |
> > |
8 |
> > We _know_ that atm is not possible to set a specific summary, instead a |
9 |
> > generic summary is used in case of compile failures and test failures. |
10 |
> > There are also some documented limitations. |
11 |
> |
12 |
> I do disagree with your presumption that this needs to be automated. |
13 |
> The whole point behind providing a service is that you should be ready |
14 |
> to dedicate *your* time into the service. However, we keep feeling that |
15 |
> you assume that your time is too precious, and it is better to waste |
16 |
> a little bit of everybody else's time. This is why Toralf's effort is |
17 |
> much more appreciated. |
18 |
> |
19 |
|
20 |
ACK. This is the same level of coordination the security team received |
21 |
when a multitude of bugs were filed once ago discovered fuzzing. It was |
22 |
lots of bugs, little information, inabilities to reproduce various |
23 |
crashes, invalid ratings/severity levels, and often a blog that |
24 |
simply regurgitated the same inaccuracies. Any attempt to ask/coordinate |
25 |
was met with lack of information or simply "see my blog" responses. |
26 |
|
27 |
The only time interaction occured was when bugs were closed due to |
28 |
invalidity, lack of information, or severity/ratings downgraded. |
29 |
|
30 |
All this to say, I concur his actions seem to show that he believes his |
31 |
time is more precious than others and that "numbers matter" when it |
32 |
comes to opening bugs and CVE's. |
33 |
|
34 |
> To summarize, what your tinderboxing effort lacks is really a human |
35 |
> touch. You seem to have set the goal to file as many bugs as possible |
36 |
> automatically. I disagree with that, as I would like this effort to |
37 |
> focus on helping developers, not pursuing them. This requires a human |
38 |
> touch, not a machine lord. |
39 |
> |
40 |
|
41 |
This right here. |
42 |
|
43 |
-- |
44 |
Cheers, |
45 |
Aaron |