Woah, the thing that leapt out at me, as a professor, is that they somehow got an exemption from the UMN institutional review board. Uh, how?? It's clearly human subjects research under the conventional federal definition[1] and obviously posed a meaningful risk of harm, in addition to being conducted deceptively. Someone has to have massively been asleep at the wheel at that IRB. [1] https://grants.nih.gov/policy-an…
The whole story is a good example of why there are IRBs in the first place --- in any story not about this Linux kernel fiasco people generally cast them as the bad guys.
A university got itself banned from the Linux kernel (2021)
41–50 of 74 posts
Re: A university got itself banned from the Linux kernel (2021)
#42Woah, the thing that leapt out at me, as a professor, is that they somehow got an exemption from the UMN institutional review board. Uh, how?? It's clearly human subjects research under the conventional federal definition[1] and obviously posed a meaningful risk of harm, in addition to being conducted deceptively. Someone has to have massively been asleep at the wheel at that IRB. [1] https://grants.nih.gov/policy-an…
I've also had to deal with the IRB a lot as a professor. The retroactive application is extremely weird (although maybe better than nothing?). This seems like one of those situations that would usually require regular review to err on the side of caution if nothing else. It's worth pointing out there are exceptions though: https://grants.nih.gov/sites/default/files/exempt-human-subj... Generally those exceptions fall…
I mean I feel like the IRB is mostly dealing with medical stuff. "I want to electrocute these students every week to see if it cures asthma". "No that's too much.. every other week at most". "Great I'll charge up the electrodes"
So if a security researcher rolls in after the fact and says "umm yea so this has to do with nerd stuff, computers and kernels, no humans, and I just want it all to be super secure and nobody gets hacked, sound good" "ok sure we don't care if no people are involved and don't really understand that nerd stuff, but hackers bad and you're fighting hackers"
Re: A university got itself banned from the Linux kernel (2021)
#43Re: A university got itself banned from the Linux kernel (2021)
#44Earlier quoted context omitted.
The whole story is a good example of why there are IRBs in the first place --- in any story not about this Linux kernel fiasco people generally cast them as the bad guys.
Since this IRB approved the study, what good were they?
Re: A university got itself banned from the Linux kernel (2021)
#45Earlier quoted context omitted.
Since this IRB approved the study, what good were they?
That person died in a car accident and they were wearing a seatbelt! Why would anyone wear a seatbelt? They are clearly useless.
Re: A university got itself banned from the Linux kernel (2021)
#46Earlier quoted context omitted.
Since this IRB approved the study, what good were they?
That person died in a car accident and they were wearing a seatbelt! Why would anyone wear a seatbelt? They are clearly useless.
Re: A university got itself banned from the Linux kernel (2021)
#47Woah, the thing that leapt out at me, as a professor, is that they somehow got an exemption from the UMN institutional review board. Uh, how?? It's clearly human subjects research under the conventional federal definition[1] and obviously posed a meaningful risk of harm, in addition to being conducted deceptively. Someone has to have massively been asleep at the wheel at that IRB. [1] https://grants.nih.gov/policy-an…
I think they should have gotten permission from IRB ahead of time, but this doesn't sound like they were researching human subjects? They were studying the community behind the Linux kernel, and specifically the process for gatekeeping bad changes from making it to the kernel; they weren't experimenting on specific community members. Would you consider it human experimentation if I was running an experiment to see if…
Re: A university got itself banned from the Linux kernel (2021)
#48Earlier quoted context omitted.
I've also had to deal with the IRB a lot as a professor. The retroactive application is extremely weird (although maybe better than nothing?). This seems like one of those situations that would usually require regular review to err on the side of caution if nothing else. It's worth pointing out there are exceptions though: https://grants.nih.gov/sites/default/files/exempt-human-subj... Generally those exceptions fall…
>I've also had to deal with the IRB a lot as a professor. The retroactive application is extremely weird (although maybe better than nothing?). I mean I feel like the IRB is mostly dealing with medical stuff. "I want to electrocute these students every week to see if it cures asthma". "No that's too much.. every other week at most". "Great I'll charge up the electrodes" So if a security researcher rolls in after the…
Re: A university got itself banned from the Linux kernel (2021)
#49Money is money and buys time, no harm done, useful research conducted, and a whole lot of publicity gained.
Re: A university got itself banned from the Linux kernel (2021)
#50Woah, the thing that leapt out at me, as a professor, is that they somehow got an exemption from the UMN institutional review board. Uh, how?? It's clearly human subjects research under the conventional federal definition[1] and obviously posed a meaningful risk of harm, in addition to being conducted deceptively. Someone has to have massively been asleep at the wheel at that IRB. [1] https://grants.nih.gov/policy-an…