Re: dangerous handling of security bugs
| From: | Dirk Haun | Date: | Wed, 14 Jul 2010 20:22:30 +0000 |
| Subject: | Re: dangerous handling of security bugs | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-49072@lists.php.net to get a copy of this message | ||
Am 13.07.2010 um 17:12 Uhr schrieb Ferenc Kovacs:
> it would be an interesting to check how many bugs were first marked as
> bogus then re-opened and fixed.
I've been wondering for a while now if much of the emotional reaction to bugs being closed as
"bogus" is due to that very word. I mean, the reporter obviously put some work into the
bug report and the issue was apparently important enough for them to even bother opening a bug
report in the first place. And then, after all this effort, the verdict is that it's
"bogus".
Can't really think of a good alternative right now. But if a bug was closed with a more neutral
"can't reproduce", "works as designed" or something like that then maybe
there wouldn't be such strong reactions?
Just an observation from the side lines ...
bye, Dirk