Linus Torvalds kicked the Russians out of Linux, now they're creating a sovereign Linux community in Russia — Ministry of Digital Development steps in
Linus Torvalds kicked the Russians out of Linux, now they're creating a sovereign Linux community in Russia — Ministry of Digital Development steps in
Kneejerk announcement or a serious plan, time will tell.
Oh noes, I bet lemmy.ml users all switch.
Anything involving a ministry in Russia is not a serious plan. They'll receive funding, hire a couple of bash script writers, well, maybe a couple of people who'll write drivers for Elbrus, Baikal or something that's sort of developed and produced in Russia, but nobody really uses it even in governmental structures.
One notable software business professional interviewed by RBC thought that the West’s decision would “adversely affect the life of the developer community, mutual trust within it, and therefore the quality of the product.”
It was Russia and other autocracies etc. that diminished the trust by actually financing developers for multiple years to first earn trust and finally introduce backdoors into open source software, as demonstrated by the XZ utils backdoor.
In open source projects, maintainers need to have some initial trust into each contributor, and let this trust naturally grow with time and contributions. They cannot perform intensive background checks on everyone before accepting a patch.
While it is easier to uncover backdoors in open source software, there is no good way to defend and prevent against this kind of attack in this type of development process. All open source projects can do is trying to take away some trust from people within higher risk groups. This of course might lead to discrimination.
Omg I bet lemmygrad is crying in their panties!
It was the right move, but this needs to be expanded. Assume there are state actors from all of the major countries installing backdoors.
The digital war front will be getting hit from all sides. We need extreme paranoia to protect all of the innocent bystanders. Don’t assume even your own country is trustworthy in this.
It's a shame they didn't consider moving the LF foundation to Europe or something. If the choice is kick out contributors to support sanctions or operate without political pressure, the second is far better.
I cannot stand Putin or Russia's action, but punishing individual contributors just trying to write code and build Linux isn't helpful.
Unless evidence is found of malicious commits, it is pretty harsh on those caught up with this.
Let's remember that many Russians will probably be locked up and/or killed for coming out against Putin. Punishing them achieves nothing.