Comment on Linus Torvalds affirms expulsion of Russian maintainers
JoeKrogan@lemmy.world 3 weeks agoSame could be said for any intelligence service . it is better to focus on preventing and detecting these things through analysis and code reviews.
And they could just offer boatloads of cash to someone in another country to insert something so this doesn’t really prevent anything it only isolates a certain subset of people.
Enfors@lemm.ee 3 weeks ago
So if we can’t completely 100% deal with a problem, we shouldn’t even try? I mean, you’re correct, but we can’t solve all problems at once. If we deal with at least one, then we’ve made progress. Then we can try to deal with the next one.
JoeKrogan@lemmy.world 3 weeks ago
No but this doesn’t do anything to “deal” with the problem as anyone can built up trust like Jian tan showed. The argument that this makes us more secure is like saying closed source is more secure cause the hackers dont have access to the source.
We have evidence of the us messing with nist standards so by that same logic should we assume all us actors are bad ?
The solution is to verify the code maybe have multiple people from different locations have to review stuff. Build more checks into the process.