• cmhe@lemmy.world
    link
    fedilink
    English
    arrow-up
    47
    arrow-down
    4
    ·
    4 days ago

    One notable software business professional interviewed by RBC thought that the West’s decision would “adversely affect the life of the developer community, mutual trust within it, and therefore the quality of the product.”

    It was Russia and other autocracies etc. that diminished the trust by actually financing developers for multiple years to first earn trust and finally introduce backdoors into open source software, as demonstrated by the XZ utils backdoor.

    In open source projects, maintainers need to have some initial trust into each contributor, and let this trust naturally grow with time and contributions. They cannot perform intensive background checks on everyone before accepting a patch.

    While it is easier to uncover backdoors in open source software, there is no good way to defend and prevent against this kind of attack in this type of development process. All open source projects can do is trying to take away some trust from people within higher risk groups. This of course might lead to discrimination.

    • mkwt@lemmy.world
      link
      fedilink
      English
      arrow-up
      231
      arrow-down
      5
      ·
      5 days ago

      And they are all welcome back if they can satisfy the Linux Foundation that they’re not affiliated with a sanctioned entity on the SDN list.

      • Echo Dot@feddit.uk
        link
        fedilink
        English
        arrow-up
        16
        arrow-down
        2
        ·
        5 days ago

        Does it? Russians can’t do Russian stuff anymore isn’t really controversial.

        It is somewhat chucking the baby out with the bath water but I doubt anyone’s losing sleep over it.

        • InverseParallax@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          19
          ·
          5 days ago

          No, this is clearly evil and racist and true nazism, and we must reverse it even though it doesn’t hurt anybody but the west, and therefore Russia actually wants it, but not really?

          I’m sorry, the talking points are confusing here, can I have my lines again?

    • rhabarba@feddit.org
      link
      fedilink
      English
      arrow-up
      17
      arrow-down
      86
      ·
      5 days ago

      They were removed from the maintainer position of whatever they did. Bizarre enough.

  • surph_ninja@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    ·
    3 days ago

    It was the right move, but this needs to be expanded. Assume there are state actors from all of the major countries installing backdoors.

    The digital war front will be getting hit from all sides. We need extreme paranoia to protect all of the innocent bystanders. Don’t assume even your own country is trustworthy in this.

    • Sylvartas@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 days ago

      Don’t assume even your own country is trustworthy in this.

      My country is one of the world leaders in mass spying software development and even gave themselves the right to basically do deep packet inspections on everything going through it a long time ago, so…

      • surph_ninja@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        3 days ago

        I’m pretty certain my country banned Kaspersky because they kept outing western backdoors and malware. And I would bet my life that Windows has supported free use government backdoors since at least Windows 10.

      • IndustryStandard@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        edit-2
        4 days ago

        They probably blocked that user since all he does is spam anti .ml propaganda on .world.

        All while .world admins remove any criticism of their instance for “instance bashing”.

      • TheGrandNagus@lemmy.world
        link
        fedilink
        English
        arrow-up
        86
        arrow-down
        12
        ·
        edit-2
        5 days ago

        Surely you’ve realised your instance has a huge pro-russian, pro-china tankie presence?

        Lemmy.ml admins me for being against Russia invading Ukraine and committing genocide lmao

        If you aren’t a tankie, migrating your account could be something to consider.

      • ravhall@discuss.online
        link
        fedilink
        English
        arrow-up
        40
        arrow-down
        31
        ·
        5 days ago

        Do you agree that the CCP was responsible for thousands of deaths during the Tiananmen Square massacre? Do you agree that China is committing genocide against the Uyghurs?

        If you agree, think you might agree, or don’t know what the fuck I’m talking about, you shouldn’t be on lemmy.ml

        • CaptainBasculin@lemmy.ml
          link
          fedilink
          English
          arrow-up
          20
          arrow-down
          8
          ·
          edit-2
          5 days ago

          Yes to both. I absolutely despise both country’s governments because of their actions. However mirroring the government’s actions to individuals living in a country does not seem fair. I fucking hate my country’s president, and would celebrate it if he died. Why should I get judged based on his actions?

          • Echo Dot@feddit.uk
            link
            fedilink
            English
            arrow-up
            21
            arrow-down
            6
            ·
            5 days ago

            No one’s judging you based on his actions, they’re judging you based on your actions. That being to have your account on an instance that supports those actions.

          • ravhall@discuss.online
            link
            fedilink
            English
            arrow-up
            9
            arrow-down
            4
            ·
            4 days ago

            You’re not being judged. We are letting you know what your instance is really about. Stay if you want, but you don’t align with it.

        • barsoap@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          4 days ago

          Eh the massacring happened on side streets, local Peking residents were trying to keep the army from moving into the square not really knowing that other Peking residents had already briefed the army on who the protesters actually were, and what they wanted, and how they behaved. Once the army was on the square and set an ultimatum it was cleared with no or few casualties, the reports are a bit fuzzy.

          That doesn’t excuse the CCP in one bit, of course, or rather it doesn’t excuse the hardline faction who couldn’t stomach that others in the party were actually talking to the protesters as that would set a precedent that you can just turn up on the square and get an audience with the party, or maybe more precisely could boost the influence of one party faction over the whole.

          The whole situation really can’t be divorced from Hu Yaobang and his role in the party: The protests were essentially a wake for him and his ideas. Which the hardliners thoroughly buried afterwards and the situation in China hasn’t improved to the point where Chinese would even be comfortable to criticise that decision – you’d get invited for tea, if you can catch on to the euphemism.

          If it had been up to the hardliners yes the army would’ve massacred the whole square, if that hadn’t been their intention they wouldn’t have mischaracterised the nature of the protest towards the army. Without ordinary Peking citizens stepping in, and getting butchered for it, that massacre would have happened.

          And yes the Uygur situation is a genocide that’s without question or asterisk.

            • barsoap@lemm.ee
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              1
              ·
              4 days ago

              See there’s the stuff that happened, there’s the version that tankies want to believe (complete denial), which is actually different from the official CCP stance (“necessary and proportionate police action to ensure stability”, with the implication “enough questions, comrade, nothing more to see”), which is different from western public… myth, I have to say. Back when the stuff went down western journalists didn’t know what was happening, there were confusing reports, there were reports of violence, and then there was the tank man – taken the day after (IIRC, but definitely later and no he didn’t get run over). The collective imagination somehow constructed an image of the Chinese army rolling over students. Which is… metaphorically true, but not literally. And then the CCP is using that western imagination to spin their own tale of how the evil west is slandering them.

              • ravhall@discuss.online
                link
                fedilink
                English
                arrow-up
                1
                ·
                4 days ago

                There have been plenty of years to get to the bottom of it, and I’m pretty sure the bottom of it has been found.

        • Urist@lemmy.ml
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          16
          ·
          5 days ago

          Truthfully, if anyone can give an independent first hand report about the treatment of Uyghurs in China (that is not coming from propaganda vehicles like the Victims of Communism Foundation), I would be most interested.

          No, I am not saying this in rebuttal to anything.

            • Urist@lemmy.ml
              link
              fedilink
              English
              arrow-up
              8
              arrow-down
              6
              ·
              4 days ago

              Yes. Though serious human rights violations are not the same as genocide and concentrations camps, as both the above poster and Victims of Communism Foundation wants us to believe.

              That means in no way that those violations are acceptable.

              • xor@lemmy.blahaj.zone
                link
                fedilink
                English
                arrow-up
                7
                arrow-down
                3
                ·
                4 days ago

                And, likewise, the UN stating that serious human rights violations occurred is not the same as them all saying they aren’t committing genocide

                • Urist@lemmy.ml
                  link
                  fedilink
                  English
                  arrow-up
                  6
                  arrow-down
                  7
                  ·
                  4 days ago

                  No, but I am not the one making statements. I only asked for sources that supported those made by others.

              • Railcar8095@lemm.ee
                link
                fedilink
                English
                arrow-up
                5
                arrow-down
                2
                ·
                4 days ago

                “allegations of patterns of torture, or ill-treatment, including forced medical treatment and adverse conditions of detention, are credible, as are allegations of individual incidents of sexual and gender-based violence.”

                And this is from what China let them see.

                • Urist@lemmy.ml
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  arrow-down
                  4
                  ·
                  edit-2
                  4 days ago

                  Individual incidents of sexual and gender-based violence are horrible, but not nearly the same as sexual violence employed on scale through genocidal concentration camps, which is claimed by US propaganda machines. Individual incidents of sexual violence unfortunately happen everywhere, and pretending otherwise is wilful ignorance of an endemic problem for the purpose of, what I have to assume is, an underlying agenda. Stop moving the goal post and stop using reductive argumentation to score cheap shots at China. If China really is as bad as claimed, which I am not categorically refuting, then make the proper case for it.

        • DaTingGoBrrr@lemmy.ml
          link
          fedilink
          English
          arrow-up
          28
          arrow-down
          44
          ·
          5 days ago

          The fuck? Who are you to say who should be on lemmy.ml? Just because I don’t agree with some of the people that doesn’t mean I shouldn’t be here.

          Get the fuck out of here with that segregation bullshit. I don’t want an instance that defederate from everything I don’t agree with.

          • sorghum@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            54
            arrow-down
            11
            ·
            5 days ago

            You missed the point. He’s saying if you hold those positions, then your account isn’t safe there. I just avoid the .ml servers in general because of their heavy handed and politically charged moderating. Admins and power mods ruined reddit, I’d recommend not committing the same mistakes here.

            .ml servers started the segregationist bullshit with their moderating. I’d also be interested in what your stance was on most every server defederating with exploding heads and burggit back last year.

            • DaTingGoBrrr@lemmy.ml
              link
              fedilink
              English
              arrow-up
              8
              arrow-down
              28
              ·
              5 days ago

              I don’t know anything about exploding heads and burggit but I assume they are right-leaning/alt-right. Like lemmygrad but the "opposite?) I am against defederation in general. I like to be exposed to different opinions and I am fully capable to use my brain to not become an extremist.

              That said, I don’t agree with either the extremist left or right.

          • ravhall@discuss.online
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            1
            ·
            4 days ago

            Either you do not know anything about your instance, or you disagree with my comments about China. Which one is it?

          • JoYo@lemmy.ml
            link
            fedilink
            English
            arrow-up
            8
            arrow-down
            31
            ·
            5 days ago

            they’re projecting.

            they want to destroy anyone that doesn’t share their opinions on their instance and assume that’s what happens here.

  • rottingleaf@lemmy.world
    link
    fedilink
    English
    arrow-up
    77
    arrow-down
    8
    ·
    edit-2
    5 days ago

    Anything involving a ministry in Russia is not a serious plan. They’ll receive funding, hire a couple of bash script writers, well, maybe a couple of people who’ll write drivers for Elbrus, Baikal or something that’s sort of developed and produced in Russia, but nobody really uses it even in governmental structures.

  • sem@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    43
    arrow-down
    4
    ·
    5 days ago

    There is a theory that sanctions against a country with a tyrannical ruler hurt the common people more than the oligarchs / dictator. But eventually they do make life more difficult for that ruler

      • schnurrito@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        16
        arrow-down
        4
        ·
        4 days ago

        That happens relatively rarely. Remember the protests in recent years in Thailand, Hong Kong, Iran? They went exactly nowhere.

        • underwire212@lemm.ee
          link
          fedilink
          English
          arrow-up
          21
          arrow-down
          3
          ·
          4 days ago

          TF you on? Just because there weren’t immediate, drastic regime level changes doesn’t mean they went “exactly nowhere”.

          There have been many changes at smaller levels not being reported in mainstream western media. Public pressure called for MANY local officials to step down along with changes in law that have already started effecting everyday life, and at least in Thailand, some pretty major changes in how public officials are held accountable via more expansive auditing channels, thereby increasing transparency.

          Not everything is a fucking hollywood movie wherein you have some Hunger Games style uprising against the elite.

          In fact, it’s fucking insulting hearing people who haven’t an ounce of global exposure beyond whatever 2 or 3 media sources they shove their heads into saying “those protesters got nothing accomplished”.

          Never let anyone tell you protesting doesn’t work.

          • Saleh@feddit.org
            link
            fedilink
            English
            arrow-up
            3
            arrow-down
            1
            ·
            4 days ago

            But not if the pressure is mostly coming from the external. Or worse if we look at Egypt, where now an even worse dictator than Mubarak rules, after the Egyptians have elected people the West didn’t like, and getting couped quickly.

        • Valmond@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          2
          ·
          4 days ago

          So only 3-4 left to go :-)

          Jk

          But letting the dictator free reign is even worse, look at how many people putin has killed in the unnecessary agression of Ukraine. That’s not some slight “suffering”, that’s death and everything that comes with it for the families left behind.

    • quant@leminal.space
      link
      fedilink
      English
      arrow-up
      14
      arrow-down
      5
      ·
      4 days ago

      Well confined in their instances for now. Wait until .ml and the Grad starts overflowing.

      • rando@lemmy.ml
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        1
        ·
        4 days ago

        wait is there problem with .ml ? I’ve been using this account for more than an year. Is that the reason I see hexbear posts (I want to block this instance, but don’t think it’s possible from account)

        • offspec@lemmy.world
          link
          fedilink
          English
          arrow-up
          10
          arrow-down
          1
          ·
          4 days ago

          To put it lightly, the instance owner is sympathetic to grad and hexbear.

        • Mubelotix@jlai.lu
          link
          fedilink
          English
          arrow-up
          6
          ·
          4 days ago

          It is actually possible to block an instance with your account. I heard Voyager and vanilla Lemmy allow this

        • DarkThoughts@fedia.io
          link
          fedilink
          arrow-up
          4
          arrow-down
          1
          ·
          3 days ago

          .ml is basically Lemmygrad cosplaying as moderate. Your admins (the devs of Lemmy) are literal Tankies, your news community is full of disinformation and bans anyone who’s spreading anti Tankie related comments, like the truth about Russia or China, or pro Western views.

          !meanwhileongrad@sh.itjust.works ctrl + f for .ml or use the search function and note the pinned threads.

          • rando@lemmy.ml
            link
            fedilink
            English
            arrow-up
            2
            ·
            3 days ago

            I originally created account on .ml cause it’s instance by devs. I will try to see how to switch instance (with all my content)

    • Leate_Wonceslace@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      2
      ·
      4 days ago

      It’s election day, so they’ve probably been relegated to other projects, since they won’t be able to make a difference anymore.

    • lepinkainen@lemmy.world
      link
      fedilink
      English
      arrow-up
      41
      arrow-down
      6
      ·
      4 days ago

      They weren’t just random Russians, they were working for companies under sanctions.

      What were they supposed to do? Ignore the sanctions?

      • pressanykeynow@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        18
        ·
        4 days ago

        They weren’t just random Russians, they were working for companies under sanctions.

        That’s just false. First, nobody in the maillists claimed those specific people were working for sanctioned companies. Second, at least one of the banned maintainers, when advised to contact their company’s lawyers, said he isn’t working for any company at all, just freelancing and doing free work for the community.

        What were they supposed to do? Ignore the sanctions?

        Yes. It was(and probably still is) literally written on the Linux Foundation website that the US sanctions do not concern open source community. It goes against everything open source ideology is, that is code and contribution is all that matters.

        And what’s worse it raises serious concerns what other malicious actions to the Linux kernel and other projects Linus and LF had to take on demands of the government that likes to install backdoors in software.

    • Squizzy@lemmy.world
      link
      fedilink
      English
      arrow-up
      22
      arrow-down
      8
      ·
      4 days ago

      Yeah it sucks, imagine further that you are a linux user with a compromised machine due to an insistence on tolerance in thr face of intolerance.

    • Mubelotix@jlai.lu
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      4 days ago

      Then you would understand. Even if you are benevolent, your account existing in russia is a threat to Linux

  • IcyToes@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    34
    ·
    edit-2
    5 days ago

    It’s a shame they didn’t consider moving the LF foundation to Europe or something. If the choice is kick out contributors to support sanctions or operate without political pressure, the second is far better.

    I cannot stand Putin or Russia’s action, but punishing individual contributors just trying to write code and build Linux isn’t helpful.

    Unless evidence is found of malicious commits, it is pretty harsh on those caught up with this.

    Let’s remember that many Russians will probably be locked up and/or killed for coming out against Putin. Punishing them achieves nothing.

    • the_strange@feddit.org
      link
      fedilink
      English
      arrow-up
      79
      arrow-down
      3
      ·
      5 days ago

      They removed russian maintainers that are associated with sanctioned companies. Individual russian contributers were unaffected by this.

      • anticurrent@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        19
        ·
        4 days ago

        They removed russian maintainers that are associated with sanctioned companies

        Your are voluntarily spreading fake news and you are getting upvoted for that !

        They have removed every person they suspected to be russian or have a russian “.ru” domain name in their email from the maintainers list.

        • Railcar8095@lemm.ee
          link
          fedilink
          English
          arrow-up
          13
          arrow-down
          3
          ·
          4 days ago

          Sorry bot, only those working for companies under sanction. And this doesn’t mean they can’t contribute, just that their contributions need to be approved by someone else.

          But I’m pretty sure the Russian git repo will allow us based Microsoft employees be on the mantainers list… Right? Russia state is nothing if not honest, consistent and imperi… friendly with other nations

    • TheGrandNagus@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      1
      ·
      edit-2
      4 days ago

      Moving to Europe where… there’s an even greater level of sanctions against Russia, and the population is more anti-Russia?

      I mean sure, I’d like that, but it wouldn’t have the effect you want it to lmao

      And no, maintainers for sanctioned Russian companies were removed from their positions (where they can push kernel changes with zero approval).

      Now they have to wait for their changes to be approved like everybody else. Oh no the horror.

  • rhabarba@feddit.org
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    195
    ·
    edit-2
    5 days ago

    To my complete lack of surprise, Russia is seems to be a freer country for free software developers than the United States.

      • rhabarba@feddit.org
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        51
        ·
        5 days ago

        The fact that Russia does not remove maintainers for political reasons.

        • lenz@lemmy.ml
          link
          fedilink
          English
          arrow-up
          27
          arrow-down
          3
          ·
          4 days ago

          Bro… Russia arrests protesters from the streets for committing the crime of holding up blank sheets of paper… Russia throws people in jail for political reasons all the time. How are those the actions of the free country? I have a trans friend living in Russia right now who is literally unable to speak about being trans online because she might be accused of “spreading lgbtq+ propaganda”.

          The funniest story about this is that time AST (Russian book publisher) literally redacted the text of a biography about an openly-gay Italian director called Pier Paolo Pasolini in order to comply with Russian anti-gay “propaganda” laws… and then published it with the redactions clearly visible:

          Literally redacted lmao. Does this scream “free country” to you?

          • rhabarba@feddit.org
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            19
            ·
            4 days ago

            This whole discussion exists because the USA aren’t a free country either, or else the US-based Linux Foundation would not have to act like it does, I thought?

            • Glitterbomb@lemmy.world
              link
              fedilink
              English
              arrow-up
              15
              arrow-down
              4
              ·
              4 days ago

              This discussion exists because dumbass Russian apologists won’t shut up about it

              I encourage you to google the paradox of tolerance, because you sound like a Fox News propagandist saying ‘so much for the tolerant left am I right?’

              Russia made its bed. The response from the US is exactly that - a response. Even the most tolerant society will HAVE TO be intolerant towards intolerance in order to exist.

              You can understand this or not, I really don’t care. But at least someone attempted to explain to you why you’re getting buried in downvotes.

              • rhabarba@feddit.org
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                12
                ·
                4 days ago

                But at least someone attempted to explain to you why you’re getting buried in downvotes.

                I’m old enough and have been on the internet long enough not to judge the value of my statements by how many thumbs up they get. With regard to global politics, however, I think it’s perfectly reasonable to exchange arguments, and I find it regrettable that many people seem to think that pressing voting symbols is enough of an argument.

                • Glitterbomb@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  11
                  arrow-down
                  2
                  ·
                  4 days ago

                  This isn’t an argument or even a discussion. You’re just beating a dead horse and the rest of us are sick of seeing it.

        • xor@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          12
          arrow-down
          1
          ·
          4 days ago

          Is this excluding the bit where they made criticising their war in Ukraine punishable by up to 15 years in prison?

          • rhabarba@feddit.org
            link
            fedilink
            English
            arrow-up
            9
            arrow-down
            25
            ·
            5 days ago

            dipstick

            The most normal Linux user showed up, I see.

            This wasn’t a governmental decision this was a single person making a decision.

            According to governmental regulations, yes. Please read up and try again.

        • YeetPics@mander.xyz
          link
          fedilink
          English
          arrow-up
          8
          arrow-down
          4
          ·
          5 days ago

          Why remove a maintainer when they fall out of the 14th floor of their penthouse after shooting themselves in the back of the head twice?

          • rhabarba@feddit.org
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            9
            ·
            4 days ago

            Which open source developer has been killed in Russia for being a Russian developer?

            • YeetPics@mander.xyz
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              2
              ·
              4 days ago

              I couldn’t tell you, not much real news escapes the iron curtain.

              Kinda like how not a lot of dissidents escape the iron curtain.

    • partial_accumen@lemmy.world
      link
      fedilink
      English
      arrow-up
      49
      arrow-down
      14
      ·
      5 days ago

      To my complete lack of surprise, Russia is seems to be a freer country for free software developers than the United States.

      What does the United States have to do with this? Since when is Finland part of the United States? Linus Torvalds is Finnish.

      • rc__buggy@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        60
        arrow-down
        1
        ·
        5 days ago

        The Linux Foundation is headquartered in San Francisco. It’s a US 501c non profit. Therefore, they must abide by US sanctions.

    • pimento64@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      33
      arrow-down
      3
      ·
      5 days ago

      Remind me again what Russia did with your country the instant it got the chance?

    • YeetPics@mander.xyz
      link
      fedilink
      English
      arrow-up
      15
      arrow-down
      3
      ·
      edit-2
      5 days ago

      Free to maintain a kernel that is their own and which does not belong to “ThE wEsT”.

      Free at last, free at last. Thank Putin Almighty we are free at last.