• surph_ninja@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    10 hours ago

    It was the right move, but this needs to be expanded. Assume there are state actors from all of the major countries installing backdoors.

    The digital war front will be getting hit from all sides. We need extreme paranoia to protect all of the innocent bystanders. Don’t assume even your own country is trustworthy in this.

    • Sylvartas@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      9 hours ago

      Don’t assume even your own country is trustworthy in this.

      My country is one of the world leaders in mass spying software development and even gave themselves the right to basically do deep packet inspections on everything going through it a long time ago, so…

      • surph_ninja@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        9 hours ago

        I’m pretty certain my country banned Kaspersky because they kept outing western backdoors and malware. And I would bet my life that Windows has supported free use government backdoors since at least Windows 10.

  • cmhe@lemmy.world
    link
    fedilink
    English
    arrow-up
    43
    arrow-down
    2
    ·
    16 hours ago

    One notable software business professional interviewed by RBC thought that the West’s decision would “adversely affect the life of the developer community, mutual trust within it, and therefore the quality of the product.”

    It was Russia and other autocracies etc. that diminished the trust by actually financing developers for multiple years to first earn trust and finally introduce backdoors into open source software, as demonstrated by the XZ utils backdoor.

    In open source projects, maintainers need to have some initial trust into each contributor, and let this trust naturally grow with time and contributions. They cannot perform intensive background checks on everyone before accepting a patch.

    While it is easier to uncover backdoors in open source software, there is no good way to defend and prevent against this kind of attack in this type of development process. All open source projects can do is trying to take away some trust from people within higher risk groups. This of course might lead to discrimination.

    • mkwt@lemmy.world
      link
      fedilink
      English
      arrow-up
      203
      arrow-down
      3
      ·
      2 days ago

      And they are all welcome back if they can satisfy the Linux Foundation that they’re not affiliated with a sanctioned entity on the SDN list.

      • Echo Dot@feddit.uk
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        2
        ·
        2 days ago

        Does it? Russians can’t do Russian stuff anymore isn’t really controversial.

        It is somewhat chucking the baby out with the bath water but I doubt anyone’s losing sleep over it.

        • InverseParallax@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          17
          ·
          1 day ago

          No, this is clearly evil and racist and true nazism, and we must reverse it even though it doesn’t hurt anybody but the west, and therefore Russia actually wants it, but not really?

          I’m sorry, the talking points are confusing here, can I have my lines again?

    • rhabarba@feddit.org
      link
      fedilink
      English
      arrow-up
      14
      arrow-down
      78
      ·
      2 days ago

      They were removed from the maintainer position of whatever they did. Bizarre enough.

    • quant@leminal.space
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      2
      ·
      15 hours ago

      Well confined in their instances for now. Wait until .ml and the Grad starts overflowing.

  • sem@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    36
    arrow-down
    3
    ·
    2 days ago

    There is a theory that sanctions against a country with a tyrannical ruler hurt the common people more than the oligarchs / dictator. But eventually they do make life more difficult for that ruler

        • Valmond@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          15 hours ago

          So only 3-4 left to go :-)

          Jk

          But letting the dictator free reign is even worse, look at how many people putin has killed in the unnecessary agression of Ukraine. That’s not some slight “suffering”, that’s death and everything that comes with it for the families left behind.

      • schnurrito@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        4
        ·
        1 day ago

        That happens relatively rarely. Remember the protests in recent years in Thailand, Hong Kong, Iran? They went exactly nowhere.

        • underwire212@lemm.ee
          link
          fedilink
          English
          arrow-up
          20
          arrow-down
          2
          ·
          19 hours ago

          TF you on? Just because there weren’t immediate, drastic regime level changes doesn’t mean they went “exactly nowhere”.

          There have been many changes at smaller levels not being reported in mainstream western media. Public pressure called for MANY local officials to step down along with changes in law that have already started effecting everyday life, and at least in Thailand, some pretty major changes in how public officials are held accountable via more expansive auditing channels, thereby increasing transparency.

          Not everything is a fucking hollywood movie wherein you have some Hunger Games style uprising against the elite.

          In fact, it’s fucking insulting hearing people who haven’t an ounce of global exposure beyond whatever 2 or 3 media sources they shove their heads into saying “those protesters got nothing accomplished”.

          Never let anyone tell you protesting doesn’t work.

          • Saleh@feddit.org
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            1
            ·
            13 hours ago

            But not if the pressure is mostly coming from the external. Or worse if we look at Egypt, where now an even worse dictator than Mubarak rules, after the Egyptians have elected people the West didn’t like, and getting couped quickly.

  • rottingleaf@lemmy.world
    link
    fedilink
    English
    arrow-up
    71
    arrow-down
    6
    ·
    edit-2
    2 days ago

    Anything involving a ministry in Russia is not a serious plan. They’ll receive funding, hire a couple of bash script writers, well, maybe a couple of people who’ll write drivers for Elbrus, Baikal or something that’s sort of developed and produced in Russia, but nobody really uses it even in governmental structures.

    • Mubelotix@jlai.lu
      link
      fedilink
      English
      arrow-up
      2
      ·
      14 hours ago

      Then you would understand. Even if you are benevolent, your account existing in russia is a threat to Linux

    • lepinkainen@lemmy.world
      link
      fedilink
      English
      arrow-up
      38
      arrow-down
      3
      ·
      1 day ago

      They weren’t just random Russians, they were working for companies under sanctions.

      What were they supposed to do? Ignore the sanctions?

      • pressanykeynow@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        16
        ·
        1 day ago

        They weren’t just random Russians, they were working for companies under sanctions.

        That’s just false. First, nobody in the maillists claimed those specific people were working for sanctioned companies. Second, at least one of the banned maintainers, when advised to contact their company’s lawyers, said he isn’t working for any company at all, just freelancing and doing free work for the community.

        What were they supposed to do? Ignore the sanctions?

        Yes. It was(and probably still is) literally written on the Linux Foundation website that the US sanctions do not concern open source community. It goes against everything open source ideology is, that is code and contribution is all that matters.

        And what’s worse it raises serious concerns what other malicious actions to the Linux kernel and other projects Linus and LF had to take on demands of the government that likes to install backdoors in software.

    • Squizzy@lemmy.world
      link
      fedilink
      English
      arrow-up
      19
      arrow-down
      7
      ·
      1 day ago

      Yeah it sucks, imagine further that you are a linux user with a compromised machine due to an insistence on tolerance in thr face of intolerance.

  • IcyToes@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    31
    ·
    edit-2
    2 days ago

    It’s a shame they didn’t consider moving the LF foundation to Europe or something. If the choice is kick out contributors to support sanctions or operate without political pressure, the second is far better.

    I cannot stand Putin or Russia’s action, but punishing individual contributors just trying to write code and build Linux isn’t helpful.

    Unless evidence is found of malicious commits, it is pretty harsh on those caught up with this.

    Let’s remember that many Russians will probably be locked up and/or killed for coming out against Putin. Punishing them achieves nothing.

    • TheGrandNagus@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      1
      ·
      edit-2
      14 hours ago

      Moving to Europe where… there’s an even greater level of sanctions against Russia, and the population is more anti-Russia?

      I mean sure, I’d like that, but it wouldn’t have the effect you want it to lmao

      And no, maintainers for sanctioned Russian companies were removed from their positions (where they can push kernel changes with zero approval).

      Now they have to wait for their changes to be approved like everybody else. Oh no the horror.

    • the_strange@feddit.org
      link
      fedilink
      English
      arrow-up
      73
      arrow-down
      2
      ·
      2 days ago

      They removed russian maintainers that are associated with sanctioned companies. Individual russian contributers were unaffected by this.

      • anticurrent@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        16
        ·
        1 day ago

        They removed russian maintainers that are associated with sanctioned companies

        Your are voluntarily spreading fake news and you are getting upvoted for that !

        They have removed every person they suspected to be russian or have a russian “.ru” domain name in their email from the maintainers list.

        • Railcar8095@lemm.ee
          link
          fedilink
          English
          arrow-up
          11
          ·
          1 day ago

          Sorry bot, only those working for companies under sanction. And this doesn’t mean they can’t contribute, just that their contributions need to be approved by someone else.

          But I’m pretty sure the Russian git repo will allow us based Microsoft employees be on the mantainers list… Right? Russia state is nothing if not honest, consistent and imperi… friendly with other nations

  • rhabarba@feddit.org
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    173
    ·
    edit-2
    2 days ago

    To my complete lack of surprise, Russia is seems to be a freer country for free software developers than the United States.

    • YeetPics@mander.xyz
      link
      fedilink
      English
      arrow-up
      15
      arrow-down
      2
      ·
      edit-2
      1 day ago

      Free to maintain a kernel that is their own and which does not belong to “ThE wEsT”.

      Free at last, free at last. Thank Putin Almighty we are free at last.

      • rhabarba@feddit.org
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        43
        ·
        2 days ago

        The fact that Russia does not remove maintainers for political reasons.

        • xor@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          11
          arrow-down
          1
          ·
          1 day ago

          Is this excluding the bit where they made criticising their war in Ukraine punishable by up to 15 years in prison?

        • YeetPics@mander.xyz
          link
          fedilink
          English
          arrow-up
          8
          arrow-down
          3
          ·
          1 day ago

          Why remove a maintainer when they fall out of the 14th floor of their penthouse after shooting themselves in the back of the head twice?

          • rhabarba@feddit.org
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            6
            ·
            1 day ago

            Which open source developer has been killed in Russia for being a Russian developer?

            • YeetPics@mander.xyz
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              13 hours ago

              I couldn’t tell you, not much real news escapes the iron curtain.

              Kinda like how not a lot of dissidents escape the iron curtain.

          • rhabarba@feddit.org
            link
            fedilink
            English
            arrow-up
            8
            arrow-down
            21
            ·
            2 days ago

            dipstick

            The most normal Linux user showed up, I see.

            This wasn’t a governmental decision this was a single person making a decision.

            According to governmental regulations, yes. Please read up and try again.

    • partial_accumen@lemmy.world
      link
      fedilink
      English
      arrow-up
      47
      arrow-down
      13
      ·
      2 days ago

      To my complete lack of surprise, Russia is seems to be a freer country for free software developers than the United States.

      What does the United States have to do with this? Since when is Finland part of the United States? Linus Torvalds is Finnish.

      • rc__buggy@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        53
        arrow-down
        1
        ·
        2 days ago

        The Linux Foundation is headquartered in San Francisco. It’s a US 501c non profit. Therefore, they must abide by US sanctions.