digger wrote on Today, 15:15:Hmmm... Considering the limited functionality of the HGC standard (a text mode with 2 intensities and a fixed resolution monochr […]
Show full quote
jakethompson1 wrote on Yesterday, 15:17:
IIRC it's partly due to the flood of potential security hole reports due to AI. With no one to test, the kernel team has no idea whether their fixes break the drivers or not so they just want to delete drivers if there is no one to test. They did back off a bit on common ISA ethernet cards that VM software still presents as an emulated card, since users pointed out they're still using them.
Hmmm... Considering the limited functionality of the HGC standard (a text mode with 2 intensities and a fixed resolution monochrome graphics mode with two frame buffers) and therefore the relatively limited attack surface, if we were to find a dedicated Vogoner willing to volunteer to maintain and regularly test the driver, perhaps Linus and his lieutenants could be convinced to keep the HGC fbdev driver in the mainline kernel? 🙂
It might be come part of a larger initiative to set up a vintage test farm that automatically tests old drivers on actual old hardware, remotely driven by CI/CD pipelines.
We could call it "Jurassic Park"! 😁
That's sound all good and fine. But as jake said, they probably did drop this because they don't have an active maintainer right now to handle the flood of information coming from their AI overlords. So it was just easier to drop things, and this is kind of arbitrary even if someone could have maintained it, or that there are still users out there.
I just had a first hand experience with an AI security fix yesterday, as there are tell-tale signs, that got accepted into open source project streams, without anyone reviewing or testing it! Not only does it not work, but it completely broke the function and returns wrong! It changed code that was completely fine in the name of security because AI doesn't know what the function is for, and therefore how it is not actually vulnerable. What's worse, is it went through the largest distributions, very big corporate ones, already a YEAR ago, when we finally got it in the last few days in our little corner of the internet for us to see and figure this out. This means it is likely widespread but not many people are actually using it to have noticed.
So I don't think that even having a few users and keeping it in is going to remain unaffected, if they are just going to get people (or fully automated machines) pushing through this slop in the name of "security". It might be better to drop it from linux, and let more competent people maintain it out of tree. These are stable, simple enough drivers and programs, that don't need much maintenance -- well certainly not the careless kind. I'd rather them leave this stuff alone than pretend they have any clue what they are doing running AI.