ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    How Debian Is Taking On the CIA for Security

    News
    debian security linux
    5
    8
    2.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • mlnewsM
      mlnews
      last edited by

      File this under "one of the many ways open source can potentially be more secure than closed souce", the Debian project looked at how the CIA has compromised some of the most secure closed source build processes around and how they can attempt to ensure that similar attacks cannot be made against Debian packages.

      1 Reply Last reply Reply Quote 3
      • Deleted74295D
        Deleted74295 Banned
        last edited by

        My gut reaction...

        BWHAHAHAHAHAHAHAHAHAHAAHAH

        And that will be the CIAs reaction. They are trying to compete with an agency with 10x the funding and 10x the incentive to break into your system, I wish them luck!

        scottalanmillerS 1 Reply Last reply Reply Quote 0
        • Deleted74295D
          Deleted74295 Banned
          last edited by

          In principle it works after reading the article.

          In practice? Let's find out. (of course we never will because national security)

          1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller @Deleted74295
            last edited by

            @Breffni-Potter said:

            And that will be the CIAs reaction. They are trying to compete with an agency with 10x the funding and 10x the incentive to break into your system, I wish them luck!

            The people working there have little incentive. Other than hating people, there is nothing motivating the people who work at the CIA. It's not even a job that they can brag about. They both aren't allowed to and generally would be embarrassed to do so (seriously, I'd be completely ashamed if that was my job.) It's a government, grinding job. No incentive to do good work except for outright hatred of other Americans and a desire to screw them.

            But for Debian and the open source community there is the incentive of freedom, protection and caring about each other. Much stronger incentives.

            Deleted74295D RojoLocoR 2 Replies Last reply Reply Quote 0
            • DustinB3403D
              DustinB3403
              last edited by

              The practice is completely sound. But you'd need to build 2, distinct compilers to ensure neither has been tampered with.

              1 Reply Last reply Reply Quote 0
              • Deleted74295D
                Deleted74295 Banned @scottalanmiller
                last edited by

                @scottalanmiller said:

                The people working there have little incentive. It's a government, grinding job. No incentive to do good work except for outright hatred of other Americans and a desire to screw them.

                But Soviet Russia will invade, We need to beat Al-Qaeda, ect.

                Why have their been so many large scale spying programs? Plus the CIA is surely not cleared to operate on American soil, is that the job of the FBI to spy and harness? CIA is there to spy on outsiders?

                scottalanmillerS 1 Reply Last reply Reply Quote 0
                • RojoLocoR
                  RojoLoco @scottalanmiller
                  last edited by

                  @scottalanmiller said:

                  No incentive to do good work except for outright hatred of other Americans and a desire to screw them.

                  Just the types that get hired to do gub'ment work... hooray.

                  1 Reply Last reply Reply Quote 1
                  • scottalanmillerS
                    scottalanmiller @Deleted74295
                    last edited by

                    @Breffni-Potter said:

                    But Soviet Russia will invade, We need to beat Al-Qaeda, ect.

                    They know they are attacking Americans. There can't honestly be any confusion about what they are doing.

                    1 Reply Last reply Reply Quote 1
                    • 1 / 1
                    • First post
                      Last post