Mastodawn

gigadadz Jan 7, 2025

Kinda sus...

Kinda sus... - Lemmy.World

The NSA, the original primary developer of SELinux, released the first version to the open source development community under the GNU GPL on December 22, 2000.[6] The software was merged into the mainline Linux kernel 2.6.0-test3, released on 8 August 2003. Other significant contributors include Red Hat, Network Associates, Secure Computing Corporation, Tresys Technology, and Trusted Computer Solutions. https://en.wikipedia.org/wiki/Security-Enhanced_Linux [https://en.wikipedia.org/wiki/Security-Enhanced_Linux]

Show thread

Snot Flickerman Jan 7, 2025

I mean, it’s still Open Source, right? So it would be pretty hard for them to hide a backdoor or something??

I guess I don’t know what’s so sus when it’s easily auditable by the community and has been for two decades now.

If it’s just because it’s memes and you’re not being that serious, then disregard please.

Show thread

TootSweet Jan 7, 2025

So it would be pretty hard for them to hide a backdoor or something??

It happens, though.

FBI accused of planting backdoor in OpenBSD IPSEC stack

A former OpenBSD contributor claims that the FBI paid open source developers …

Ars Technica

Show thread

emeralddawn45 Jan 7, 2025

Do you know of any good comprehensive followup to this? A quick search shows me lots of outdated info and inconclusive articles. Do you know if they conclusively found anything or if there is a good writeup on the whole situation?

Show thread

MajorHavoc

I don’t have such a source, but the Cybersecurity community throw accusations around easily, and are loathe to every bless any software as completely innocent - which is a good thing.

When the accusations stopped, the issue has either addressed (typical outcome), or the product owner was written off by the Cybersecurity community as a lost cause (rare, but it happens).