• hemko@lemmy.dbzer0.comEnglish
    2751·
    1 year ago

    The story does not tell us how Linus Torvalds responded to the NSA, but I’m guessing he told them he wouldn’t be able to inject backdoors even if he wanted to, since the source code is open, and all changes to it are reviewed by many independent people.

    Yeah I’m guessing the answer would be more colorful based on the historical data we have

    • floofloof@lemmy.caEnglish
      44·
      1 year ago

      Also experience shows that it’s possible to backdoor software in very subtle ways that could go years without anyone spotting them. So if he had decided to he probably could have done it, despite Linux being open source.

    • Sylvartas@lemmy.world
      19·
      11 months ago

      I would pay money to see daddy Linus flip off some big shot intelligence official

    • iAvicenna@lemmy.world
      16·
      11 months ago

      Oh man would die to see his reply. It would probably start with something like

      “The fact that I have to explain this to a person who works in a national security agency makes me really worried…”

    • Scrollone@feddit.it
      16·
      11 months ago

      Recent versions of sudo changed that message and now I’m sad 😢

      • june (she/her)@lemmy.ml
        10·
        11 months ago

        Damn, I’m going to miss those messages one day on my Debian stable server.

      • sntx@lemm.ee
        18·
        1 year ago

        nah, we have run0 at home

  • Icalasari@fedia.io
    1247·
    1 year ago

    I somehow misread that as NBA, and was very confused what basketball had to do with OS backdoors

    NSA makes

    WAY more sense

  • Hugin@lemmy.world
    1071·
    1 year ago

    Years ago there was a commit to the Linux kernal that strangly had no author. This got some attention of several of the developers.

    Looking into the code that had to deal with network transmission. there was a section that if you tried to get network access in a unusual way had a check that was written something like this.

    If (usr_permission = ROOT) … Instead of If (usr_permission == ROOT) …

    The first giving the user root if invoked and the second checking to see if the user was root.

    It’s widely thought this was the NSA or some other intelligence agency trying to backdoor lin Linux.

      • brianorca@lemmy.world
        241·
        11 months ago

        This is because NSA has two roles: eavesdropping on foreign adversaries, and protecting our internal systems from adversaries. Under the first role, they might introduce an exploit known only to themselves. Under the second, they help protect US systems from exploits known to others.

        • BobGnarley@lemm.ee
          12·
          11 months ago

          And because of this it makes whatever they fuck with have unnecessary security issues.

          Also though they are using it to straight up spy on you whether foreign or not. They got in “trouble” for it once and pinky swore not to do it again.

          Fuck the NSA

    • Possibly linux@lemmy.zipEnglish
      2112·
      1 year ago

      Or it could of been any person or country. It was a nothing burger and is still a nothing burger

  • Arthur Besse@lemmy.mlEnglish
    64·
    11 months ago

    he wouldn’t be able to inject backdoors even if he wanted to, since the source code is open

    Jia Tan has entered the chat

    • awiteb@lemmy.4rs.nlOPEnglish
      48·
      1 year ago

      I wouldn’t be surprised if I knew that the backdoors that appear in Windows were designed by someone. I didn’t know they were this brazen.

        • Kyrgizion@lemmy.world
          21·
          1 year ago

          Yeah, when the actual mobo and cpu can be taken over remotely, what does the OS even matter?

          • sunzu2@thebrainbin.org
            182·
            1 year ago

            exploits regularly found in AMD and intel consumer chips

            didn’t apple chips get spotted with a vulnerability also? m2s?

      • FreudianCafe@lemmy.ml
        202·
        1 year ago

        I didn’t know they were this brazen.

        Oh boy i remember when i was this innocent

        • awiteb@lemmy.4rs.nlOP
          21·
          1 year ago

          I’m not innocent, but this is unbelievable, that they would ask the main developer to plant a virus in it!! This is really rude

          • sunzu2@thebrainbin.org
            10·
            1 year ago

            He is lucky he is no a US national… that convo could have gone down differently. People telling US spooks no, don’t live long.

            • chicken@lemmy.dbzer0.com
              4·
              1 year ago

              tbf the article only assumes he told them no because of how implausible it seems the task would be, the actual details of what if anything was discussed and what happened are unknown.

          • sub_ubi@lemmy.ml
            8·
            1 year ago

            of all the things the nsa has done this is probably the nicest

    • einkorn@feddit.org
      161·
      1 year ago

      For what? Destabilizing the whole technological ecosystem of the planet is not a crime. ¯\(ツ)

  • ragica@lemmy.ml
    511·
    1 year ago

    As long as the backdoor is licenced GPL what’s the problem?

  • scorp@lemmy.mlEnglish
    502·
    1 year ago

    good thing he’s not an American citizen

  • youmaynotknow@lemmy.ml
    12·
    1 year ago

    If you want t see Mr. Torvalds questioning this in the video in the link, go straight to minute 43.

  • fart_pickle@lemmy.world
    11·
    11 months ago

    Circa 1975, IBM proposed the cipher now called DES, the Data Encryption Standard. It became a worldwide standard for secret key encryption. As IBM originally designed it, DES had a 64-bit key. The National Security Agency (NSA) required that the key be reduced from 64 bits to 56 bits, with the other 8 bits used as a checksum. This made no sense. If a checksum were really needed, then the key could be increased from 64 to 72 bits. It was widely believed that the real reason the NSA made this demand was that it knew how to crack messages using a 56-bit key, but not messages using a 64-bit key. This proved to be true.

    Secret Key Cryptography by Frank Rubin

    • whodatdair@lemmy.blahaj.zone
      121·
      1 year ago

      You really took the time to comment and complain that you’ve already seen this? You’re… upset that your time was wasted?

      Buddy. Cmon.