Mastodawn

gigadadz Jan 7, 2025

Kinda sus...

Kinda sus... - Lemmy.World

The NSA, the original primary developer of SELinux, released the first version to the open source development community under the GNU GPL on December 22, 2000.[6] The software was merged into the mainline Linux kernel 2.6.0-test3, released on 8 August 2003. Other significant contributors include Red Hat, Network Associates, Secure Computing Corporation, Tresys Technology, and Trusted Computer Solutions. https://en.wikipedia.org/wiki/Security-Enhanced_Linux [https://en.wikipedia.org/wiki/Security-Enhanced_Linux]

Show thread

Snot Flickerman Jan 7, 2025

I mean, it’s still Open Source, right? So it would be pretty hard for them to hide a backdoor or something??

I guess I don’t know what’s so sus when it’s easily auditable by the community and has been for two decades now.

If it’s just because it’s memes and you’re not being that serious, then disregard please.

Show thread

spacecadet Jan 7, 2025

I maintain open source software on a much smaller codebase that is less security critical. We have dozens of maintainers on a project with about 3k stars on GitHub. Stuff gets by that are potentially security vulnerabilities and we don’t know until upstream sources tell us there is a vulnerability

Show thread

Kusimulkku

I’d imagine in this case there has been extra community scrutiny since it’s security software and it comes from less than trustworthy source.