3 ms·
Aside from numerous ethical issues with this story, it doesn’t make a lot of practical sense. They are not major threat to avoid, even taking into account xz pr
by ivan_gammel 2y ago
Aside from numerous ethical issues with this story, it doesn’t make a lot of practical sense. They are not major threat to avoid, even taking into account xz precedent - I don’t think it’s easy or even feasible to plant any backdoors to Linux kernel this way.
This will not make any impact on Russian government or military operations or impair their OS development effort (Astra Linux will be just fine). It sounds pretty much like some legalese ass-covering met the unhinged personality of Torvalds with the scandal as the only outcome.
- jpfr 2y agoYes, this can be circumvented. But the optics are important. Imagine a backdoor planted by a Russian asset. Linux could get removed from some list of approved OS that can be used in a government context.
- ivan_gammel 2y ago> Imagine a backdoor planted by a Russian asset. Email-based filtering of maintainers is not even close to what could be considered adequate security measures. In fact, when CISO or OSS starts caring about the optics, it’s a red flag.