lonestar-lemmy
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
awiteb@lemmy.4rs.nl to Privacy@lemmy.mlEnglish · 9 months ago

NSA Asked Linus Torvalds To Install Backdoors Into GNU/Linux [2013]

falkvinge.net

external-link
message-square
61
link
fedilink
557
external-link

NSA Asked Linus Torvalds To Install Backdoors Into GNU/Linux [2013]

falkvinge.net

awiteb@lemmy.4rs.nl to Privacy@lemmy.mlEnglish · 9 months ago
message-square
61
link
fedilink
NSA Asked Linus Torvalds To Install Backdoors Into GNU/Linux
falkvinge.net
external-link
The NSA has asked Linus Torvalds to inject covert backdoors into the free and open operating system GNU/Linux. This was revealed in this week's...

repost from: https://falkvinge.net/2013/11/17/nsa-asked-linus-torvalds-to-install-backdoors-into-gnulinux

alert-triangle
You must log in or register to comment.
  • hemko@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    275
    arrow-down
    1
    ·
    9 months ago

    The story does not tell us how Linus Torvalds responded to the NSA, but I’m guessing he told them he wouldn’t be able to inject backdoors even if he wanted to, since the source code is open, and all changes to it are reviewed by many independent people.

    Yeah I’m guessing the answer would be more colorful based on the historical data we have

    • reisub@discuss.tchncs.de
      link
      fedilink
      arrow-up
      127
      ·
      9 months ago

      based on the historical data

      https://github.com/corollari/linusrants

      • bitfucker@programming.dev
        link
        fedilink
        arrow-up
        105
        arrow-down
        1
        ·
        9 months ago

        There aren’t enough swear-words in the English language, so now I’ll have to call you perkeleen vittupää just to express my disgust and frustration with this crap.

        Beautiful

        • zbyte64@awful.systems
          link
          fedilink
          arrow-up
          33
          ·
          9 months ago

          It’s like our very own Gordon Ramsay

      • Socialist Mormon Satanist@lemmy.worldBanned
        link
        fedilink
        arrow-up
        2
        arrow-down
        5
        ·
        9 months ago

        https://github.com/corollari/linusrants

        This is beautiful. Thank you! lol

    • floofloof@lemmy.ca
      link
      fedilink
      English
      arrow-up
      44
      ·
      9 months ago

      Also experience shows that it’s possible to backdoor software in very subtle ways that could go years without anyone spotting them. So if he had decided to he probably could have done it, despite Linux being open source.

    • Sylvartas@lemmy.world
      link
      fedilink
      arrow-up
      19
      ·
      9 months ago

      I would pay money to see daddy Linus flip off some big shot intelligence official

    • iAvicenna@lemmy.world
      link
      fedilink
      arrow-up
      16
      ·
      9 months ago

      Oh man would die to see his reply. It would probably start with something like

      “The fact that I have to explain this to a person who works in a national security agency makes me really worried…”

  • invalid_display_name@lemm.ee
    link
    fedilink
    arrow-up
    126
    ·
    9 months ago

    Ohh so it’s the NSA that my failed sudos are reported to!

    • Scrollone@feddit.it
      link
      fedilink
      arrow-up
      16
      ·
      9 months ago

      Recent versions of sudo changed that message and now I’m sad 😢

      • june (she/her)@lemmy.ml
        link
        fedilink
        arrow-up
        10
        ·
        9 months ago

        Damn, I’m going to miss those messages one day on my Debian stable server.

    • fernlike3923@sh.itjust.works
      link
      fedilink
      arrow-up
      15
      ·
      9 months ago

      Switch to doas so feds don’t get any more reports!

      • sntx@lemm.ee
        link
        fedilink
        arrow-up
        17
        ·
        9 months ago

        nah, we have run0 at home

  • Icalasari@fedia.io
    link
    fedilink
    arrow-up
    124
    arrow-down
    7
    ·
    9 months ago

    I somehow misread that as NBA, and was very confused what basketball had to do with OS backdoors

    NSA makes

    WAY more sense

    • Steamymoomilk@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      52
      arrow-down
      1
      ·
      9 months ago

      Michel jordan want to look at your browser history :D

      • cmbabul@lemmy.world
        link
        fedilink
        arrow-up
        13
        ·
        9 months ago

        Nope this has Kareem written all over it

        • WhiskyTangoFoxtrot@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          9 months ago

          Roger Murdock?

      • WhiskyTangoFoxtrot@lemmy.world
        link
        fedilink
        arrow-up
        4
        ·
        9 months ago

        No, that’s Mark McGwire.

    • IllNess@infosec.pub
      link
      fedilink
      arrow-up
      11
      ·
      9 months ago

      A OS backdoor is very simular to a backdoor cut, which allows a player to sneak behind defenders when they are focused on the ball or player with a ball.

      NBA coaches have taken inspiration from many different places to perfect their plays. Computer security is just another step.

    • Sudo Sodium @lemdro.id
      link
      fedilink
      English
      arrow-up
      11
      ·
      9 months ago

      I read it NASA at first

    • sunzu2@thebrainbin.org
      link
      fedilink
      arrow-up
      11
      arrow-down
      3
      ·
      9 months ago

      Removed by mod

    • lockhart@lemmy.ml
      link
      fedilink
      arrow-up
      4
      ·
      edit-2
      9 months ago

      they wanted to cut to the basket behind the defense

  • Hugin@lemmy.world
    link
    fedilink
    arrow-up
    106
    arrow-down
    1
    ·
    9 months ago

    Years ago there was a commit to the Linux kernal that strangly had no author. This got some attention of several of the developers.

    Looking into the code that had to deal with network transmission. there was a section that if you tried to get network access in a unusual way had a check that was written something like this.

    If (usr_permission = ROOT) … Instead of If (usr_permission == ROOT) …

    The first giving the user root if invoked and the second checking to see if the user was root.

    It’s widely thought this was the NSA or some other intelligence agency trying to backdoor lin Linux.

    • prettybunnys@sh.itjust.works
      link
      fedilink
      arrow-up
      18
      ·
      9 months ago

      The other side of that coin is the NSA developing SELinux

      • brianorca@lemmy.world
        link
        fedilink
        arrow-up
        25
        arrow-down
        1
        ·
        9 months ago

        This is because NSA has two roles: eavesdropping on foreign adversaries, and protecting our internal systems from adversaries. Under the first role, they might introduce an exploit known only to themselves. Under the second, they help protect US systems from exploits known to others.

        • BobGnarley@lemm.ee
          link
          fedilink
          arrow-up
          13
          ·
          9 months ago

          And because of this it makes whatever they fuck with have unnecessary security issues.

          Also though they are using it to straight up spy on you whether foreign or not. They got in “trouble” for it once and pinky swore not to do it again.

          Fuck the NSA

          • BeardedGingerWonder@feddit.uk
            link
            fedilink
            English
            arrow-up
            5
            ·
            9 months ago

            Now they get the Brits and Aussies to do it and give them the reports.

    • Possibly linux@lemmy.zip
      link
      fedilink
      English
      arrow-up
      21
      arrow-down
      12
      ·
      9 months ago

      Or it could of been any person or country. It was a nothing burger and is still a nothing burger

      • Hugin@lemmy.world
        link
        fedilink
        arrow-up
        26
        ·
        edit-2
        9 months ago

        It was clearly an attack. By who is unknown.

        Notably this was in 2003 before git (2005) so linux source was in a central bitkeeper repo. So a commit with no associated data about who did it should not have been possible.

        Here is a more detailed article. https://lwn.net/Articles/57135/

      • desertdruid@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        8
        ·
        9 months ago

        speaking in burger terms as any good american

        • Possibly linux@lemmy.zip
          link
          fedilink
          English
          arrow-up
          2
          ·
          9 months ago

          Proud to be an American, at least I know I’m free.

          • desertdruid@lemmy.blahaj.zone
            link
            fedilink
            arrow-up
            3
            arrow-down
            1
            ·
            9 months ago

            Free to buy all the hamburgers!

    • Boomkop3@reddthat.com
      link
      fedilink
      arrow-up
      7
      arrow-down
      1
      ·
      9 months ago

      fork the kernel and yeet it?

      • Hugin@lemmy.world
        link
        fedilink
        arrow-up
        23
        ·
        9 months ago

        It was caught and never made it in the kernel.

        • Boomkop3@reddthat.com
          link
          fedilink
          arrow-up
          4
          ·
          9 months ago

          Gud gud

  • BmeBenji@lemm.ee
    link
    fedilink
    arrow-up
    98
    ·
    9 months ago

    This incident will be reported

  • Arthur Besse@lemmy.ml
    link
    fedilink
    English
    arrow-up
    64
    ·
    9 months ago

    he wouldn’t be able to inject backdoors even if he wanted to, since the source code is open

    Jia Tan has entered the chat

    • thedeadwalking4242@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      9 months ago

      The project contains binary blobs anyway so theoretically it wouldn’t be super hard

  • GolfNovemberUniform@lemmy.ml
    link
    fedilink
    arrow-up
    58
    arrow-down
    1
    ·
    9 months ago

    But nobody’s going to give them any sentence for that unfortunately.

    • awiteb@lemmy.4rs.nlOP
      link
      fedilink
      English
      arrow-up
      48
      ·
      9 months ago

      I wouldn’t be surprised if I knew that the backdoors that appear in Windows were designed by someone. I didn’t know they were this brazen.

      • sunzu2@thebrainbin.org
        link
        fedilink
        arrow-up
        25
        ·
        9 months ago

        chips too

        • Kyrgizion@lemmy.world
          link
          fedilink
          arrow-up
          21
          ·
          9 months ago

          Yeah, when the actual mobo and cpu can be taken over remotely, what does the OS even matter?

        • ᥫ᭡ 𐑖ミꪜᴵ𝔦 ᥫ᭡@feddit.org
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          edit-2
          1 hour ago

          deleted by creator

          • sunzu2@thebrainbin.org
            link
            fedilink
            arrow-up
            18
            arrow-down
            2
            ·
            9 months ago

            exploits regularly found in AMD and intel consumer chips

            didn’t apple chips get spotted with a vulnerability also? m2s?

            • ᥫ᭡ 𐑖ミꪜᴵ𝔦 ᥫ᭡@feddit.org
              link
              fedilink
              English
              arrow-up
              14
              arrow-down
              1
              ·
              edit-2
              1 hour ago

              deleted by creator

      • FreudianCafe@lemmy.ml
        link
        fedilink
        arrow-up
        20
        arrow-down
        2
        ·
        9 months ago

        I didn’t know they were this brazen.

        Oh boy i remember when i was this innocent

        • awiteb@lemmy.4rs.nlOP
          link
          fedilink
          arrow-up
          2
          arrow-down
          1
          ·
          9 months ago

          I’m not innocent, but this is unbelievable, that they would ask the main developer to plant a virus in it!! This is really rude

          • sunzu2@thebrainbin.org
            link
            fedilink
            arrow-up
            10
            ·
            9 months ago

            He is lucky he is no a US national… that convo could have gone down differently. People telling US spooks no, don’t live long.

            • chicken@lemmy.dbzer0.com
              link
              fedilink
              arrow-up
              4
              ·
              edit-2
              9 months ago

              tbf the article only assumes he told them no because of how implausible it seems the task would be, the actual details of what if anything was discussed and what happened are unknown.

          • sub_ubi@lemmy.ml
            link
            fedilink
            arrow-up
            8
            ·
            9 months ago

            of all the things the nsa has done this is probably the nicest

    • einkorn@feddit.org
      link
      fedilink
      arrow-up
      16
      arrow-down
      1
      ·
      9 months ago

      For what? Destabilizing the whole technological ecosystem of the planet is not a crime. ¯\(ツ)/¯

  • ragica@lemmy.ml
    link
    fedilink
    arrow-up
    51
    arrow-down
    1
    ·
    9 months ago

    As long as the backdoor is licenced GPL what’s the problem?

  • scorp@lemmy.ml
    link
    fedilink
    English
    arrow-up
    51
    arrow-down
    2
    ·
    9 months ago

    good thing he’s not an American citizen

    • DacoTaco@lemmy.world
      link
      fedilink
      arrow-up
      21
      ·
      9 months ago

      Except he is. He lives in portland now afaik

      • scorp@lemmy.ml
        link
        fedilink
        English
        arrow-up
        10
        ·
        9 months ago

        it’s over

  • mox@lemmy.sdf.org
    link
    fedilink
    arrow-up
    38
    ·
    edit-2
    9 months ago

    Here’s where Linus did/said the thing. (He is the second person from the right.)

    https://www.youtube.com/watch?v=7gRsgkdfYJ8

  • NGC2346@sh.itjust.works
    link
    fedilink
    arrow-up
    14
    ·
    9 months ago

    When was the last analysis of the linux kernel source code ?

  • youmaynotknow@lemmy.ml
    link
    fedilink
    arrow-up
    12
    ·
    9 months ago

    If you want t see Mr. Torvalds questioning this in the video in the link, go straight to minute 43.

    • geoma@lemmy.ml
      link
      fedilink
      arrow-up
      2
      arrow-down
      1
      ·
      9 months ago

      What Mr torvalds is that?

      • youmaynotknow@lemmy.ml
        link
        fedilink
        arrow-up
        3
        ·
        9 months ago

        Dad.

  • fart_pickle@lemmy.world
    link
    fedilink
    arrow-up
    11
    ·
    9 months ago

    Circa 1975, IBM proposed the cipher now called DES, the Data Encryption Standard. It became a worldwide standard for secret key encryption. As IBM originally designed it, DES had a 64-bit key. The National Security Agency (NSA) required that the key be reduced from 64 bits to 56 bits, with the other 8 bits used as a checksum. This made no sense. If a checksum were really needed, then the key could be increased from 64 to 72 bits. It was widely believed that the real reason the NSA made this demand was that it knew how to crack messages using a 56-bit key, but not messages using a 64-bit key. This proved to be true.

    Secret Key Cryptography by Frank Rubin

  • delirious_owl@discuss.online
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    9 months ago

    Lol good year for the NSA

  • uzi@lemmy.ca
    link
    fedilink
    arrow-up
    5
    arrow-down
    51
    ·
    9 months ago

    Removed by mod

    • Naich@lemmings.world
      link
      fedilink
      arrow-up
      28
      ·
      9 months ago

      Who pissed on your chips, Mr. Grumpy?

    • whodatdair@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      12
      arrow-down
      1
      ·
      edit-2
      9 months ago

      You really took the time to comment and complain that you’ve already seen this? You’re… upset that your time was wasted?

      Buddy. Cmon.

Privacy@lemmy.ml

privacy@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.ml

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

  • Lemmy.ml libre_culture
  • Lemmy.ml privatelife
  • Lemmy.ml DeGoogle
  • Lemmy.ca privacy

much thanks to @gary_host_laptop for the logo design :)

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1.54K users / day
  • 4.04K users / week
  • 7.09K users / month
  • 16.4K users / 6 months
  • 1 local subscriber
  • 37.7K subscribers
  • 3.58K Posts
  • 95.3K Comments
  • Modlog
  • mods:
  • k_o_t@lemmy.ml
  • tmpod@lemmy.pt
  • Yayannick@lemmy.ml
  • ranok@sopuli.xyz
  • BE: 0.19.11
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org