4 ms·
The ideal state is having the world's superpowers all devoting effort to improving open source libraries, but all catching each others' backdoors and at the end
by pants2 2y ago
The ideal state is having the world's superpowers all devoting effort to improving open source libraries, but all catching each others' backdoors and at the end of the day improving security for everyone.
- bee_rider 2y agoWeb of trust, but all commits must be signed by at least 3 intelligence agencies from rival countries.
- jonhohle 2y ago“Web of distrust”
- transpute 2y agoAt least 2 rival legal Jurisdictions/Alliances/Spheres At least 2 rival state intelligence Agencies per Sphere At least 2 rival corporations per Sphere TOTAL: 2*(2+2) = 8 Widely used OSS projects are contested spheres of collaboration.
- voiper1 2y agoSo the long game is rival countries are secretly collaborating, so we secretly have world peace!
- glodalitazic 2y agoImagine all war stops and noone knows it
- wiseowise 2y agoRussia, China, Iran and NK cock-block development for years, because the MR “doesn’t represent their interests”.
- saagarjha 2y agoSounds a lot like how web standards work!
- protomolecule 2y agoYou mean like the US blocks all efforts to ban putting weapons in space?
- wiseowise 2y ago[flagged]
- protomolecule 2y ago[flagged]
- bee_rider 2y agoYeah, it is definitely an off the cuff incomplete idea. I think you’d want to structure things pretty carefully. Maybe somehow classify countries into: Hostile, Competitor, Unaligned, Friendly, and Too Friendly. Maybe just ignore Hostile, try to find enough competitors to ensure at least one will review, require a couple unaligneds and friendlies, and then consider “too friendly” to be the same as your own country. Like from a US point of view, if the US and the UK agree on something… I mean, that only counts as one point, right? We are too close. But if like half of the EU and India agree, there’s enough competing self-interest to let it through (keeping in mind that it is all open source, nobody wants to be caught doing something sketchy). And if China, the US, and any other non-5-eyes country agree on something, it must be fine. (I picked these countries because I think they are pretty uncontroversial, I’m definitely not going to try and list who’d be in the hostile group, that’s just asking for unproductive political squabbling). Multiple possible paths, no veto. But I have no idea how to fix the problem of: some countries look more or less trustworthy from others’ point of view; I think we can easily suggest a plan from the US point of view, but I have no idea how to get everyone to agree on what the actual state of a single source code repository is, since commits have dependencies. Maybe it needs to be more like a package manager.
- goodpoint 2y agoThis has been quietly happening for a good while...
- MaxBarraclough 2y agoI wouldn't say so. * Bruce Schneier writing about the NSA: https://www.theguardian.com/commentisfree/2013/sep/05/government-betrayed-internet-nsa-spying https://www.theguardian.com/commentisfree/2013/sep/05/govern... * https://en.wikipedia.org/wiki/Bullrun_(decryption_program) https://en.wikipedia.org/wiki/Bullrun_(decryption_program)
- lynx23 2y agoSounds like asking for World Peace.
- Contortion 2y agoMutually Assured Backdoors