3 ms·

Everyone knows that happens. The issue is that these are presumably university funded researchers who intentionally tried to introduce vulnerabilities into the

by genmud 5y ago

Everyone knows that happens. The issue is that these are presumably university funded researchers who intentionally tried to introduce vulnerabilities into the Linux kernel without working with the maintainers. It is fine to perform experiments like this, with permission. I think people are upset because there is a moral, ethical and social obligation expected from academia to not intentionally do shit like this. They then published a paper and thought that this was acceptable behavior from a research/ethical standpoint.

mopsi 5y ago
> I think people are upset because there is a moral, ethical and social obligation expected from academia to not intentionally do shit like this. OSS security should not rely on ethics and trust. The default assumption should be that malicious actors are using every dirty tactic they can to get their changes accepted, and that someone@something.edu is no more trustworthy than internal.security.agency@china.gov.cn. Feels like the OSS community got caught with their pants down and is now overreacting.