Re: NEW handling: About rejects, and kernels

[Thomas Bushnell BSG <tb@becket.net>]

md@Linux.IT (Marco d'Itri) writes:

> > We should tell users: we are unable to support this hardware, because
> > we don't have the source.  Among other things, we are unable to fix
> > security bugs in it.
> We are unable to fix security bugs in hardware with non-modifiable
> firmware and modifiable but permanently stored firmware too. Should we
> drop support for these devices too?

In that case, we are not responsible for shipping them the buggy
software in the first place.

Debian takes security responsibility for the software we ship, and
rightly so.  We do not promise to make the user's house bug-free, but
we do take responsibility for what we ship.

I'm disappointed you want to change that.