5 ms·

We are talking about deliberate security vulnerabilities in the Linux kernel, a piece of critical infrastructure. Frankly, this is not the place to assume good

• varajelle 5y ago
  But they did not introduce security vulnerabilities as there prevented the bad patches from being merged
  • Karunamon 5y ago
    Those measures were insufficient, as according to the developers, a number of the bogus patches were merged and had to be reverted.
    • varajelle 5y ago
      I think the kernel maintainer reverted all the patches coming from that university, regardless if they were bogus or not.
    • rincebrain 5y ago
      Sort of? The "hypocrite commits", according to the researchers' own paper, originated from "random Gmail addresses", and the researchers continue to claim none of those got merged (though since they haven't told us what they were, ...) The additional claim is that some of the commits not covered by their "hypocrite commits" (and thus, submitted from their UMN addresses) contained security bugs, deliberate or not, and the loss of trust in the researchers is sufficient to justify reverting all of their commits until they can be reviewed.