Every bugfix is a CVE. Even if it is maybe not a security problem in first place, but it might be one in the kernel context, so everything is a CVE. Also other CVEs from other applications, open source or not, doesn't have to mean that much. You have to see those database quite critical. Especially if you need very esoteric, almost magical methods to exploit.

When the people of the Linux Kernel started flooding them, because every bug is a security problem, those Database providers were and are very happy. It makes good money, those data is seller from other providers to companies. And now you really have to use their service, because the kernel have soooooooo many security problems! It is not like developers or security teams are happy about this shit. But if the senior leaders insist on use those CVEs, you don't have any choice. And it is not that unusual, that it is not needed to address them.

The Linux Kernel can provide and provides more security when you use them. It is the decision of the distribution if they want to enable selinux or apparmor, enable kernel options, which make your system more hardened with memory encryption, page poison or kernel lock down and and and. Since this is only the kernel, the userland can provide more features, which some distributions also enables.

The way you can elevate applications and define special rights for the usage of devices or OS functions, is incomparable to standard Windows. Would only user, group and rwx exist, they wouldn't be any lxc, podman, docker or whatever today. Windows does not the same now. Windows does it different and can't do some things regarding elevation of rights and their restriction by design.

Linux Kernel provides more security techniques than Windows indeed, but they need to be used. To point out CVEs is kind of stupid. The Linux kernel never commited any entries to the CVE database for years, they started since February 2024 doing so, because they gave up on their opposition. They warned, if they do this now, the databases will get flooded with CVEs. Because in the kernel context, every bug counts as a security problem, if you look at it from the right perspective. This is a difference to Windows CVEs.

Of course this is great for those CVEs database providers because they now can sell their stuff happily.

What you need are not CVE entries for the Linux Kernel, but the latest supported Linux Kernel installed.

And srsly: Antivirus is snake oil. Using software with Administrator rights in Windows or even Linux, which parses every file, is fucking dangerous. It is usable on a mailserver, where the antivirus process is containerised or virtualized.

And what is the point with firewalls I read here? The most distros have firewalls enabled. When were they not there? Iptables was always there and I had to configure it, so I could allow or disallow incoming traffic. I almost never had to install it manually.

Edit:

Regarding CVEs, here the what Linux CNA tells:

Note, due to the layer at which the Linux kernel is in a system, almost any bug might be exploitable to compromise the security of the kernel, but the possibility of exploitation is often not evident when the bug is fixed. Because of this, the CVE assignment team is overly cautious and assign CVE numbers to any bugfix that they identify. This explains the seemingly large number of CVEs that are issued by the Linux kernel team.

Source

Any bugfix is a CVE

Never expected that there is meat :O

Is Russia now dangerous or not? I mean if they have such shitty military and tactics then there is probably no threat coming from them.

Also a tactic don't have to be bad because it is old. The usage of a tactic is decided by the concrete situation. You know guerrilla warfare? That's something really old. Look how the Roman Empire managed to beat Hannibal. Jesus wasn't even born than and this tactic can be very effective. 20th century is full of guerilla warfare.

I did it few times between 2008 and 2010 when I was way younger. Idk how I did it, but after two times I was used to it and learned also a lot. Today I don't have the nerves to install arch without archinstall or anarchy. The wiki helped me a lot. The wiki gives an excellent guide to install arch and to set up everything you need. It is well written enough, that no deep Linux knowledge is needed

The archlinux wiki is great for everything. I used it when I had Fedora, Debian or sometimes if I used OpenBSD.

Russians endlessly dying. China collapsing every day. And now South Korea is going extinct.

I find it interesting how the yellow press developed Now almost everybody can be yellow press. But to be honest I like China collapsing videos more, because those thumbnails are funny. 24432 Billion lost! 28 days left! Drastic decline in population! The end is near! Xi had diarrhoea and attacked Taiwan with a comically gigantic chopstick. Its Over! And every time the thumbnail has red background, little text or some numbers and a picture of Xi.

анти-человеческих идеологии́ sounds odd. антигуманные sounds more right. No need to use a hypen here. Also идеологий is wrong too, its идеологии - ии not ий.

That sounds banal, but it shows me that this translation was scribbled down to give the impression that the video was made specifically so that Ivan Ivanovitch Ivanov from Tomsk - who supposedly otherwise only knows propaganda - would be presented with the "truth".

Low effort at its finest. Packed with summarizing reformulations based on BBC and CNN and you're done. A few sloppy translations (nobody in the West really knows Cyrillic anyway) and you can upload it. I can do it with a bit of time too, it's not that difficult. Or about China, really easy, since it's been constantly collapsing for decades according to those stupid and popular videos, as well as the sun, Jupiter, Saturn, etc.

1. When will those fuckers realise, that the Soviet Union was not Russia. There are many countries today which were part of this union.

2. The apartments were nice. Nothing scary. Not that much different from average apartments in France, Germany or Sweden. Well of course, soviet apartmens were affordable - indeed a scary thing for landlords.

3. For me scary, and I am serious, are old apartments from the US. Imagine playing a game, where you are a black woman in the 70s somewhere in Chicago or idk. Detroid.

4. Why are they so stupid? If I see buildings from eastern europe, I see that it was tried and tried to build enough apartments for peoples. And here in Germany they talking shit to make it more attractive for those bourgeois fuckers to build more apartments. But hey hey, the invisible hand of the market will certainly solve this problem!

Jeff. My name is Jeff.

Just wait a year and the entire population of russia is gone! Mark my words, soon the average babushka will driving tanks. After that, the russian population will not be zero but also negative, till it reaches the 32bit integer limit (The russian bot is cheap and broken, has only 32bit and 90nm) and we suddenly have 2147483647 russians!

And because they have faulty weapons, they will keep dying and dying till the russian population reaches -2147483547 agains and then it wilp repeat again. This is very tragic, but it is their fault for not switching their russian bots to 64bit and buy more RAM (They still use DDR RAM because they are still sad that the DDR was united with West Germany).

Please subscribe to my workshop, where I show you how to program a kill counter in Go and provide C bindings for other languages!

Thank you for reading my facts, I am simple working man and have no connection to CIA.

But there is even a picture how he pets a dog! And the dog seems to be happy too!

The comments are weird:

However, his videos are really stupid and often straight false. I wrote this comment from OnePlus Nord -12GB Ram - with LineageOS 21 using the NeverSettle Kernel (Not Apple!!!!).