frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Who Writes the Bugs? A Deeper Look at 125,000 Kernel Vulnerabilities

https://pebblebed.com/blog/kernel-bugs-part2
46•MBCook•2h ago

Comments

dogleash•1h ago
These smell like the kind of metrics that cause someone to feel informed and then to miss the forest for the trees. The kind of data for a "data driven" decision maker who will just invent a narrative to explain the numbers, and then do what they wanted to do all along.

The map is not the territory.

palmotea•1h ago
> These smell like the kind of metrics that cause someone to feel informed and then to miss the forest for the trees. The kind of data for a "data driven" decision maker who will just invent a narrative to explain the numbers, and then do what they wanted to do all along.

We need to increase reliability in the kernel, so the kernel team should fire the top 5 bug-introducers, to reduce the amount of bugs being introduced (https://pebblebed.com/blog/kernel-bugs-part2/05_author_analy...). Linus has got to go.

gchamonlive•1h ago
> We need to increase reliability in the kernel, so the kernel team should fire the top 5 bug-introducers, to reduce the amount of bugs being introduced (https://pebblebed.com/blog/kernel-bugs-part2/05_author_analy...). Linus has got to go.

You've cut bugs being introduced while also reducing development costs by slashing team size. You deserve a promotion and an increase in equity.

alwa•1h ago
The LLM-tone doesn’t help:

117 people meet this criteria. And the impact is dramatic:

It’s strange to me to think of “bugfixes” in terms of a commodity. Different problem spaces between subsystems and thus different types of (and surfaces for) bugs; different contributor mixes; different number of eyes on them; different potential impacts…

> CAN bus drivers top the list [of bug lifetime by subsystem]. These are used in automotive and industrial systems. Critical infrastructure with few maintainers watching.

…or maybe higher-quality initial submissions, with most of the easy bugs already wrung out of them, so only subtle bugs remain (thus fewer to fix).

Or adequately vigilant maintainers but low diversity of systems running that code, thus fewer users/situations where the bugs manifest, so they go unreported. Or poorer telemetry so an ordinary rate of latent bugs but they go undetected.

Could be any, probably a little of all, can’t really tell from the analysis; and each cause would suggest a different response to improve quality.

jeffbee•1h ago
Bugs Georg, who is an outlier and should be excluded from the analysis.
olivia-banks•54m ago
Strange how someone in a cave with no internet can push 10,000 bugs a day.
petterroea•1h ago
Not happy with the lack of statistical testing, some of the smaller differences in % could probably be coincidence
vintagedave•19m ago
This reads like Claude wrote it (more than ChatGPT.) Interesting data but I am unsure how actionable it is. Are they suggesting, for example, that specific commit messages get scanner more closely? Why is CAN more severe than Intel? (It does worry me. I feel like bugs, of any sort, in car systems are terrifying.)
kittikitti•8m ago
I'm not sure why this isn't included in the blog, but I was curious about the ratio between bugs and commits. Presented here are my calculations in order of total number of bugs:

Intel : 11.86%

[1] Independent : 2.27%

Red Hat : 9.74%

Linaro : 12.73%

Google : 12.78%

AMD : 9.70%

The above is based on the bug count table in the article.

[1] I combined the total bug count for independent and kernel.org because they are combined for the total contributions here, https://github.com/quguanni/kernel-archaeology/blob/main/scr...

This suggests that corporations are introducing significantly more bugs than independent developers. However, I have not done statistical testing on this nor have I recreated the numbers. If I had to speculate, I would assume that the analysis from the author was partly vibe-coded or they purposely left this analysis out due to fear of retaliation. Extending my speculation would also include that corporations are purposely introducing bugs out of malice such that there are backdoors available for them. The author mentions that there is no "corporate takeover" but perhaps there are more interesting conclusions to be found.

An interactive map of FLock Cams

https://deflock.org/map#map=5/37.125286/-96.284180
202•anjel•1h ago•33 comments

MacBook Neo

https://www.apple.com/newsroom/2026/03/say-hello-to-macbook-neo/
1143•dm•6h ago•1488 comments

Father claims Google's AI product fuelled son's delusional spiral

https://www.bbc.com/news/articles/czx44p99457o
38•tartoran•40m ago•6 comments

Making Firefox's right-click not suck with about:config

https://joshua.hu/firefox-making-right-click-not-suck
138•mmsc•2h ago•84 comments

Something is afoot in the land of Qwen

https://simonwillison.net/2026/Mar/4/qwen/
331•simonw•4h ago•158 comments

Nobody Gets Promoted for Simplicity

https://terriblesoftware.org/2026/03/03/nobody-gets-promoted-for-simplicity/
706•aamederen•8h ago•408 comments

NanoGPT Slowrun: Language Modeling with Limited Data, Infinite Compute

https://qlabs.sh/slowrun
55•sdpmas•2h ago•7 comments

Moss is a pixel canvas where every brush is a tiny program

https://www.moss.town/
80•smusamashah•10h ago•10 comments

Data Has Weight but Only on SSDs

https://cubiclenate.com/2026/03/04/data-has-weight-but-only-on-ssds-blathering/
22•LorenDB•1h ago•10 comments

Who Writes the Bugs? A Deeper Look at 125,000 Kernel Vulnerabilities

https://pebblebed.com/blog/kernel-bugs-part2
46•MBCook•2h ago•10 comments

Roboflow (YC S20) Is Hiring a Security Engineer for AI Infra

https://roboflow.com/careers
1•yeldarb•2h ago

“It turns out” (2010)

https://jsomers.net/blog/it-turns-out
182•Munksgaard•5h ago•64 comments

Faster C software with Dynamic Feature Detection

https://gist.github.com/jjl/d998164191af59a594500687a679b98d
22•todsacerdoti•1h ago•2 comments

Raspberry Pi Pico as AM Radio Transmitter

https://www.pesfandiar.com/blog/2026/02/28/pico-am-radio-transmitter
37•pesfandiar•3d ago•18 comments

Glaze by Raycast

https://www.glazeapp.com/
156•romac•7h ago•92 comments

Qwen3.5 Fine-Tuning Guide – Unsloth Documentation

https://unsloth.ai/docs/models/qwen3.5/fine-tune
186•bilsbie•8h ago•49 comments

The View from RSS

https://www.carolinecrampton.com/the-view-from-rss/
3•Curiositry•8m ago•0 comments

My Favorite 39C3 Talks

https://asindu.xyz/my-favorite-39c3-talks/
13•max_•3d ago•2 comments

Libre Solar – Open Hardware for Renewable Energy

https://libre.solar
152•evolve2k•3d ago•46 comments

Google ends its 30 percent app store fee and welcomes third-party app stores

https://www.engadget.com/apps/google-ends-its-30-percent-app-store-fee-and-welcomes-third-party-a...
43•_____k•47m ago•11 comments

MyFirst Kids Watch Hacked. Access to Camera and Microphone

https://www.kth.se/en/om/nyheter/centrala-nyheter/kth-studenten-hackade-klocka-for-barn-1.1461249
81•jidoka•7h ago•21 comments

Agentic Engineering Patterns

https://simonwillison.net/guides/agentic-engineering-patterns/
441•r4um•15h ago•242 comments

The Space Race's Forgotten Theme Park

https://daily.jstor.org/the-space-races-forgotten-theme-park/
8•anarbadalov•2h ago•0 comments

TikTok will not introduce end-to-end encryption, saying it makes users less safe

https://www.bbc.com/news/articles/cly2m5e5ke4o
369•1659447091•18h ago•360 comments

RFC 9849. TLS Encrypted Client Hello

https://www.rfc-editor.org/rfc/rfc9849.html
243•P_qRs•13h ago•120 comments

Government grant-funded research should not be published in for-profit journals

https://www.experimental-history.com/p/the-one-science-reform-we-can-all
289•sito42•5h ago•127 comments

Emails to Outlook.com rejected due to a fault or overzealous blocking rules

https://www.theregister.com/2026/03/04/users_fume_at_outlookcom_email/
107•Bender•8h ago•66 comments

Motorola GrapheneOS devices will be bootloader unlockable/relockable

https://grapheneos.social/@GrapheneOS/116160393783585567
1162•pabs3•19h ago•474 comments

RE#: how we built the fastest regex engine in F#

https://iev.ee/blog/resharp-how-we-built-the-fastest-regex-in-fsharp/
173•exceptione•3d ago•61 comments

The 1,700-year-old megastructure history almost forgot

https://www.cnn.com/2026/02/28/travel/travel-news-jetavanaramaya-ephesus
15•simonebrunozzi•2d ago•2 comments