Live data from Hacker News

Several Russian developers lose kernel maintainership status

lwn.net

31–40 of 314 posts

Re: Several Russian developers lose kernel maintainership status

#31

Strongly opposed to any sort of sanction regime that results in this.

Let me spell it out for you:

If Project P in Country A is identified by Country B as a potential target for planting cyber-attack-enabling backdoors, Country B has an incentive to find people to put a backdoor in P.

If Country B is a free country with rights and ethics, they will say "Help us put a backdoor in P. We'll pay you very well for services rendered," or try to get someone who already works for Country B intelligence into P's management structure.

If Country B is an "evil" country, they will do all of the above, but will also tell people of influence in P who live or have family in Country B or its allies, "Help us put a backdoor in P. If you refuse or if the backdoor doesn't work or if the legitimate workers of P find it and remove it before it helps us, you'll be arrested and/or tortured and/or killed and/or your family too."

Removing Russian based kernel maintainers from positions in which they could conceivably help insert a backdoor into the kernel hopefully removes the incentive for the Russian government to threaten (or carry out) horrific violence against these individuals and their families.

Re: Several Russian developers lose kernel maintainership status

#33

Strongly opposed to any sort of sanction regime that results in this.

[flagged]

> That freedom means giving enemies unfettered access to our most sensitive systems?

Do you imply that Linux is a technology controlled by Western state actors?

> I would like to remind you of the recent XZ utils backdoor into SSH contributed by a less than friendly nation state.

Would you support a backdoor contributed by a friendly nation state?

Re: Several Russian developers lose kernel maintainership status

#34
post #17

Earlier quoted context omitted.

It's of the main reasons these sanctions exist. It's the biggest topic in Europe since WW2.

Well, I oppose the inclusion of OSS in those sanctions. I’m also generally skeptical of the theory of change - economic decoupling generally doesn’t make conflict less likely or protracted.

So you think in 1992 when FRY was sanctioned research and Internet links should not have been affected when flights were suspended for example?

Re: Several Russian developers lose kernel maintainership status

#35
post #6

Earlier quoted context omitted.

Probably not sanctions, but national security concerns. The former aims to punish and worsen the situation of the other country, the latter aims to reduce the attack vector and improve the situation of the US.

It’s pretty evident at this point that any Russian citizen in Russia or with family in Russia can be coerced, and it’s also pretty clear that Putin specifically does not have good intentions. There are lots of good people there. It’s too bad there is a crazy person at the helm.

all you have to look at is the number of russian oligarchs being defenstrated since the invasion began to know that if it served russian aims to inject malware into the kernel somehow via their maintainers it would probably be tried. the maintainers are probably not oligarch level rich so imagine the pressure on them if needed.

Re: Several Russian developers lose kernel maintainership status

#37
post #4

Not sure this is really what anyone had in mind when sanctioning Russia? The maintainers probably aren't pleased but can't see a direct route from there to Putin's opinion of the war in Ukraine.

"Putins opinion on the war he started" undersells the issue that Russia has actively been undermining, killing, and sabotaging in western countries.

[flagged]

Re: Several Russian developers lose kernel maintainership status

#38

Earlier quoted context omitted.

[flagged]

Who is the “our” that owns Linux? It is a human project and any human should be able to be maintainer. Liberalism is what makes our society great, not paranoia and securitization.

So they can fork it and roll their own version of Linux. Russia-ux.
Post reply on HN