![](https://seccdn.libravatar.org/avatar/d977e460744bc9591586ffd46b60adf0.jpg?s=120&d=mm&r=g)
17 May
2024
17 May
'24
12:57
On 2024-05-17 12:54, Bernhard M. Wiedemann wrote:
Maybe I should reduce the rate of updates for unreproducible packages...
Wouldn't this be effectively conceding that Slowroll users will be more vulnerable for those packages that are not reproducible? I'm also curious as to your opinion about whether using the longterm kernel makes sense in the face of research like this from CIQ? https://ciq.com/whitepaper/vendor-kernels-bugs-stability/ ? Looking at your numbers I'm finding myself worrying you're doing a ton of really detailed work for less gains than we hoped when we first talked about this concept