Re: dangerous handling of security bugs
| From: | Patrick ALLAERT | Date: | Thu, 15 Jul 2010 04:56:18 +0000 |
| Subject: | Re: dangerous handling of security bugs | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-49075@lists.php.net to get a copy of this message | ||
2010/7/14 Dirk Haun <dirk@haun-online.de>:
> Am 13.07.2010 um 17:12 Uhr schrieb Ferenc Kovacs:
>
>> it would be an interesting to check how many bugs were first marked as
>> bogus then re-opened and fixed.
>
> I've been wondering for a while now if much of the emotional reaction to bugs being closed
> as "bogus" is due to that very word. I mean, the reporter obviously put some work into the
> bug report and the issue was apparently important enough for them to even bother opening a bug
> report in the first place. And then, after all this effort, the verdict is that it's
> "bogus".
>
> Can't really think of a good alternative right now. But if a bug was closed with a more
> neutral "can't reproduce", "works as designed" or something like that then
> maybe there wouldn't be such strong reactions?
>
> Just an observation from the side lines ...
>
> bye, Dirk
Interesting point!
"expected behavior" ?
Patrick