[deleted]
CopperheadOS update: Developer suspended from Reddit
21–30 of 52 posts
Re: CopperheadOS update: Developer suspended from Reddit
#22As far as I can tell, both the CEO and the developer have behaved very unprofessionally during this whole affair, airing their grievances and their dirty laundry on public forums. I don’t think I would trust either of them to run a company or maintain a trustworthy codebase. They should consider the damage they are doing to their reputations and start acting like adults.
I have not yet read the post, but this trend of striking people off for their mistakes gets on my nerves. The morning I was reading an article on NYT comparing Einstein's remarks from his visits to Asian countries, which are rather racist, and his standing with the black in the American racial conflict. Tge possibility that he discovered the falsehood of his previous thoughts, if we take them as racist ones, and changed his ideas and stance is completely ignored. We make mistakes, sometimes we learn better.
Re: CopperheadOS update: Developer suspended from Reddit
#23Looks like more than just the two looped in now: https://old.reddit.com/r/redditrequest/comments/8ra5b5/reque... Edit: The repo is also private now https://github.com/CopperheadOS http://archive.is/rOnWi
Update - A community member tried to document the happenings of the events and the CEO of CopperheadOS sent a DMCA request to take it down.
https://raw.githubusercontent.com/yegortimoshenko/copperhead...
Re: CopperheadOS update: Developer suspended from Reddit
#24Looks like more than just the two looped in now: https://old.reddit.com/r/redditrequest/comments/8ra5b5/reque... Edit: The repo is also private now https://github.com/CopperheadOS http://archive.is/rOnWi
Repos have been moved to http://github.com/AndroidHardening.
Re: CopperheadOS update: Developer suspended from Reddit
#25I don't think it's over for CopperheadOS, but it is over for that name. Like Cyanogen changing to LineageOS, the dev who deleted his signing keys will probably just foke a new code base with a new name. Obviously it won't be as peaceful a transition Cyanogen->Lineage, but that's my prediction for this Android variant in the next few months.
Daniel sounds rather burnt out, and also needs to find a new job. I wouldn't expect updates at the same pace.
Re: CopperheadOS update: Developer suspended from Reddit
#26Earlier quoted context omitted.
CopperheadOS was spearheaded by two people (to my understanding): the founder, and the lead developer. They had a falling out. The developer felt that the founder had compromised their ideals in order to make money (how this was done has not been detailed). The founder told the developer that he's out. The developer, in turn, deleted the signing keys so that no new software can be published under the CopperheadOS nam…
It was never a very secure OS / product / distro if a single individual was able to destroy the signing keys in this fashion. If this personal battle is enough for folks to say the whole thing is now compromised, and one person held all the keys, how do you know he hadn’t been compromised before? If the code has no third party audits, or a web of trust, then it was never secure to begin with.
There's always a chain of trust. What alternative would you suggest?
I think I remember reading that in Google there's like 5 people that have the master keys and are able to deploy any kind of change at any moment without any review or oversight. They're the top of the chain of trust.
Re: CopperheadOS update: Developer suspended from Reddit
#27Well I do have to thank them for blowing this up now, as I'm in the market for a new pocket tracker.
It seems like the least-worst option is Samsung Exynos -> Lineage -> No GoogleCrutches -> F-droid.
Still a fucking dumpster fire. Alas, here's to hoping pmOS (or the like) actually goes somewhere.
Re: CopperheadOS update: Developer suspended from Reddit
#28can anyone give the short version of what happened? I'm not familiarized with CopperheadOS and I like this kind of drama
Re: CopperheadOS update: Developer suspended from Reddit
#29Earlier quoted context omitted.
It was never a very secure OS / product / distro if a single individual was able to destroy the signing keys in this fashion. If this personal battle is enough for folks to say the whole thing is now compromised, and one person held all the keys, how do you know he hadn’t been compromised before? If the code has no third party audits, or a web of trust, then it was never secure to begin with.
There's always a chain of trust. What alternative would you suggest? I think I remember reading that in Google there's like 5 people that have the master keys and are able to deploy any kind of change at any moment without any review or oversight. They're the top of the chain of trust.
There is a big difference between a chain of trust with multiple people involved and corporate oversight, and a chain of trust that consists of one person who wields absolute power.
So yeah, there is always a chain of trust, but some are better than others. In the Google case, if one of those 5 people started doing bad things, the others would presumably be able to stop him and undo the damage.
Re: CopperheadOS update: Developer suspended from Reddit
#30Looks like more than just the two looped in now: https://old.reddit.com/r/redditrequest/comments/8ra5b5/reque... Edit: The repo is also private now https://github.com/CopperheadOS http://archive.is/rOnWi
Update - A community member tried to document the happenings of the events and the CEO of CopperheadOS sent a DMCA request to take it down. https://raw.githubusercontent.com/yegortimoshenko/copperhead...
Wow, that surely meets the very high bar DMCA sets for false reports, right?