←back to thread

Open Source is one person

(opensourcesecurity.io)
433 points LawnGnome | 2 comments | 28 Aug 25 01:54 UTC | HN request time: 0.001s | source
Show context
poulpy123 ◴[28 Aug 25 11:02 UTC] No.45050692[source]▶
The title of the register article is completely disgusting

> Putin on the code: DoD reportedly relies on utility written by Russian dev

then in the article:

> Hunted Labs told us that it didn't speak to Malinochkin prior to publication of its report today, and that it found no ties between him and any threat actor.

replies(4): >>45051056 #>>45051324 #>>45051850 #>>45053194 #
actionfromafar ◴[28 Aug 25 11:54 UTC] No.45051056[source]▶
Aren't Russian developers on average more susceptible to the "wrench attack" though?
replies(3): >>45051090 #>>45051296 #>>45051816 #
1. pabs3 ◴[28 Aug 25 13:18 UTC] No.45051816[source]▶
Not necessarily, Australia has a law allowing the government to compel software devs to add backdoors and gag them to prevent people hearing about the backdoors.

https://scarff.id.au/blog/2023/state-actors-can-add-a-backdo...

replies(1): >>45057146 #
2. int_19h ◴[28 Aug 25 21:17 UTC] No.45057146[source]▶
While Russia doesn't need laws for that. You just get arrested for something else (e.g. planted drugs) and then tortured in detention.