You know. I don’t like what the Russian leadership and military are doing. I feel like ultimately we’re in the cold war era. But you know, at the height of the cold war, radio operators around the world still worked Russian stations.
Yes, there was a very clear policy, neither side talked about ANYTHING beyond their signal report and working conditions (information about radio, power output and aerial basically). At the height of the actual cold war, the individuals were not cancelled like this.
Sanction the leadership, sanction the money, and sanction the military. But the normal people that are subject to the propaganda? I don’t understand the benefit in doing this. I also don’t see how the sanctions effect an open source project…
Seems a bit weird. Maybe there’s information we’re not privy to, but on the face of it, just based on what we’re seeing. Seems like a very very odd move.
FSB wants backdoor in kernel. FSB notices subsystem maintainer is Russian, lives in Chelyabinsk. Can close eyes to backdoor, can pretend to review. FSB in Moscow makes call to FSB in Chelyabinsk telling them to buy heavy wrench at hardware store.
Same could be said for any intelligence service . it is better to focus on preventing and detecting these things through analysis and code reviews.
And they could just offer boatloads of cash to someone in another country to insert something so this doesn’t really prevent anything it only isolates a certain subset of people.
So if we can’t completely 100% deal with a problem, we shouldn’t even try? I mean, you’re correct, but we can’t solve all problems at once. If we deal with at least one, then we’ve made progress. Then we can try to deal with the next one.
No but this doesn’t do anything to “deal” with the problem as anyone can built up trust like Jian tan showed. The argument that this makes us more secure is like saying closed source is more secure cause the hackers dont have access to the source.
We have evidence of the US messing with nist standards so by that same logic should we assume all us actors are bad ?
The solution is to verify the code maybe have multiple people from different locations have to review stuff. Build more checks into the process.
The whole point of it being open is that it can be reviewed. It shouldn’t matter where the contributor is from as all code should be subjected to a rigorous review process.
And I’ll say the same here as I did above. If it was for security, their code is tainted too. It’s an arbitrary reaction that is not complete as a solution to anything.
You know. I don’t like what the Russian leadership and military are doing. I feel like ultimately we’re in the cold war era. But you know, at the height of the cold war, radio operators around the world still worked Russian stations.
Yes, there was a very clear policy, neither side talked about ANYTHING beyond their signal report and working conditions (information about radio, power output and aerial basically). At the height of the actual cold war, the individuals were not cancelled like this.
Sanction the leadership, sanction the money, and sanction the military. But the normal people that are subject to the propaganda? I don’t understand the benefit in doing this. I also don’t see how the sanctions effect an open source project…
Seems a bit weird. Maybe there’s information we’re not privy to, but on the face of it, just based on what we’re seeing. Seems like a very very odd move.
FSB wants backdoor in kernel. FSB notices subsystem maintainer is Russian, lives in Chelyabinsk. Can close eyes to backdoor, can pretend to review. FSB in Moscow makes call to FSB in Chelyabinsk telling them to buy heavy wrench at hardware store.
Same could be said for any intelligence service . it is better to focus on preventing and detecting these things through analysis and code reviews.
And they could just offer boatloads of cash to someone in another country to insert something so this doesn’t really prevent anything it only isolates a certain subset of people.
So if we can’t completely 100% deal with a problem, we shouldn’t even try? I mean, you’re correct, but we can’t solve all problems at once. If we deal with at least one, then we’ve made progress. Then we can try to deal with the next one.
No but this doesn’t do anything to “deal” with the problem as anyone can built up trust like Jian tan showed. The argument that this makes us more secure is like saying closed source is more secure cause the hackers dont have access to the source.
We have evidence of the US messing with nist standards so by that same logic should we assume all us actors are bad ?
The solution is to verify the code maybe have multiple people from different locations have to review stuff. Build more checks into the process.
The whole point of it being open is that it can be reviewed. It shouldn’t matter where the contributor is from as all code should be subjected to a rigorous review process.
If that were true, surely they’d not trust ANY of their existing work, or at least any done since the Special War Operation. Wouldn’t that make sense?
They’ve left the code, and removed the people arbitrarily. Seems a bit off to me.
Security. Torvalds did this for security.
Is it really that hard to parse?
And I’ll say the same here as I did above. If it was for security, their code is tainted too. It’s an arbitrary reaction that is not complete as a solution to anything.