• 0 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: June 22nd, 2023

help-circle






  • fluxion@lemmy.worldtoLinux@lemmy.mlXZ backdoor in a nutshell
    link
    fedilink
    English
    arrow-up
    2
    ·
    6 months ago

    I’m not suggesting one way or another, only that the quoted explanation taken at face value isn’t suggesting China based on name analysis.

    There’s also no reason to assume a nation state. This is completely within the realm of a single or small group of hackers. Organized crime another possibility. Errors with naming are plausible just as the initial mistakes with timing analysis and valgrind errors.

    Even assuming a nation state, you name Russia as a possibility. Russia has shown themselves to be completely capable of errors, in their hacks (2016 election interference that was traced back to their intelligence base), their wars, their assassination attempts, etc.

    And to me it doesn’t seem any more likely that China would point to themselves but sprinkle doubt with inconsistent naming versus just outright pointing to someone else.

    It’s all guesses, nothing points one way or another. I think we agree on that.












  • The user experience is based around audited, reviewed, open source software. Everything from the licenses, distro policies, and kernel maintainership is based around that model and it has benefitted users far more than if Linux was a mess binary blobs that do not interoperate with each other in a well-defined and transparent manner.

    AMD and Intel both manage just fine, along with hundreds of other companies supporting hundreds of other pieces of hardware on top of dozens of different CPU architectures. If Nvidia insists on being a special snowflake about this then it is 100% their problem.