gigadadzJan 7, 2025

Kinda sus...

https://lemmy.world/post/23969232

Kinda sus... - Lemmy.World

The NSA, the original primary developer of SELinux, released the first version to the open source development community under the GNU GPL on December 22, 2000.[6] The software was merged into the mainline Linux kernel 2.6.0-test3, released on 8 August 2003. Other significant contributors include Red Hat, Network Associates, Secure Computing Corporation, Tresys Technology, and Trusted Computer Solutions. https://en.wikipedia.org/wiki/Security-Enhanced_Linux [https://en.wikipedia.org/wiki/Security-Enhanced_Linux]

Show threadSnot FlickermanJan 7, 2025

I mean, it’s still Open Source, right? So it would be pretty hard for them to hide a backdoor or something??

I guess I don’t know what’s so sus when it’s easily auditable by the community and has been for two decades now.

If it’s just because it’s memes and you’re not being that serious, then disregard please.

Show threadTootSweetJan 7, 2025

So it would be pretty hard for them to hide a backdoor or something??

It happens, though.

FBI accused of planting backdoor in OpenBSD IPSEC stack

A former OpenBSD contributor claims that the FBI paid open source developers …

Ars Technica
Show threadwhere_am_i

People don’t understand that the way a backdoor is usually implemented is not going to be obviously saying “backdoor_here”, neither it will look like a some magic code loading a large string and unzipping it on the fly – that’s sus af. What you will see is some “play video” functionality that has a very subtle buffer overflow bug that’s also not trivially triggerable.

This already happened with WhatsApp.

Jan 7, 2025 at 10:54amWeb
Show threadPossibly linuxJan 7, 2025
Honestly I think a lot of backdoors are just unintentionally exploits that are not disclosed