Conversation

Notices

1. Embed this notice
   翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Tuesday, 09-Apr-2024 11:27:21 JST 翠星石

   in reply to

   • Account: Computers
   @pro How is it a bad thing that someone gained access to source code (of published software) that was being disgracefully restricted in betrayment of humanity?
   
   There wasn't any attack in that case either - someone having found a workaround to get a copy of something that should have been public.
   • Embed this notice
     Account: Computers (pro@mu.zaitcev.nu)'s status on Tuesday, 09-Apr-2024 11:27:22 JST Account: Computers

     in reply to

     • Matt "msw" Wilson
     @msw This reminds me, one time someone downloaded the source of SunOS 4.1.3_U1. A university that had a source license placed the repository to an NFS server that allowed mounts from anyone. It was behind a firewall, of course. The attackers somehow managed to mount the share through the firewall, and slowly siphoned it away (in order not to attract attention). And that was back when FTP was still a thing elsewhere. Surely demands for security are greater today.
   • Embed this notice
     Matt "msw" Wilson (msw@mstdn.social)'s status on Tuesday, 09-Apr-2024 11:27:23 JST Matt "msw" Wilson

     in reply to

     Given the latest attack on the Internet through persistent threat actors via xz-utils, what demands will be placed on the community of scholars (including Free and Open Source software developers) that build the software we all use and enjoy as digital public goods?

     Will they be "walls as high as the skies?"

     #FreeSoftware #OpenSource #FOSS #OSS #InfoSec #XZ

   • Embed this notice
     Matt "msw" Wilson (msw@mstdn.social)'s status on Tuesday, 09-Apr-2024 11:27:24 JST Matt "msw" Wilson

     in reply to

     This policy of trust has yielded significant benefits to the computer science community and, through the contributions of that community, to the world at large.

     Violations of such a trust cannot be condoned. Even if there are unintended side benefits, which is arguable, there is a greater loss to the community as a whole."

     - The Cornell Commission: On Morris and the Worm

     https://dl.acm.org/doi/10.1145/63526.63530

     #FreeSoftware #OpenSource #FOSS #OSS #InfoSec #XZ

   • Embed this notice
     Matt "msw" Wilson (msw@mstdn.social)'s status on Tuesday, 09-Apr-2024 11:27:25 JST Matt "msw" Wilson

     "A community of scholars should not have to build walls as high as the sky to protect a reasonable expectation of privacy [msw: or 'security'], particularly when such walls will equally impede the free flow of information.

     There is a reasonable trust between scholars in the pursuit of knowledge, a trust upon which the users of the Internet have relied for many years.

     #FreeSoftware #OpenSource #FOSS #OSS #InfoSec #XZ