> > I suspect the bulk of the reports are coming from academia > researchers. In lots of academia papers based on syzkaller I see "we > also reported X bugs to the upstream kernel". Somehow there seems to > be a preference to keep things secret before publication, so upstream > syzbot integration is problematic. Though it is well possible to > publish papers based on OSS work, these usually tend to be higher > quality and have better evaluation. > > I also don't fully understand the value of "we also reported X bugs to > the upstream kernel" for research papers. There is little correlation > with the quality/novelty of research. It's nice to have a statement from a report. Because academics may not be familiar with the process of reporting, and based on some of the wrong experiences with past Mailing lists, they may continue to use it and make this redundant process reproduce over and over again. I personally support this.😂 -kun
