2 ms·
dis-sys, throughout this thread you seem a bit upset, and seem to be carrying luggage on HN in general, given your outsized participation in China-centric threa
by jldugger 9y ago
dis-sys, throughout this thread you seem a bit upset, and seem to be carrying luggage on HN in general, given your outsized participation in China-centric threads. I really don't think the post is as negative as you expect.
The OP is also the author of LinuxFoundation's laptop security guidelines. LF has been targetted by a number of DDoS's intrustions and worms. At least one was successful, and it's not clear if it was a criminal org, or a state actor disguised as such. So their laptop configuration policy is designed to thwart all comers. Hard drive / swap encryption, SSH keys on GPG cards, secureboot, SELinux, encrypted backups, NoScript, HTTPSEverywhere, FireJail, etc.
China's policy appears to be that you must provide them with data should they request it. Making this happen is pretty much in direct contravention of the same laptop configuration policies designed to thwart the NSA, Europeans, Russians, cybercriminals, etc. But lets look at it this way: LF knew the facts on the ground in China, and proceeded anyways. So their IT manager responsible for preventing another break-in publishes a guide for adhering to China's laws while keeping the LF safe.
Throughout this thread I see people suggesting that they're never bothered by state apparatus, so nobody should worry. I don't know which of that sentiment's implications is more insulting: that kernel.org isn't worthy of state infiltration, or that China isn't competent enough to pull it off.