The absolute disregard of having any moderation is what does that. If there was any, there wouldn't be the cases like having someone be there by their third account, after the first two got banned.
Not to mention that controversy = angry people and trolls = more clicks = more ad revenue. I don't think Michael wants to miss out on it.
I would never. The idea that any person should be disbarred from contributing to FOSS due to the actions of their government, is incredibly exclusionary. Linus is acting as much like a toddler as daddy USA is.
As a finn, I understand that there are probably legal reasons for doing this.
I just wish they would be transparent and share those reasons with us. The Linux kernel is certainly not the only free software project that is impacted, if this comes straight from EU/US sanctions. Maintainers of other projects have a lot of interest in what is happening.
Transparency is also important because if EU/US policy/sanctions are causing issues for free software projects, then that discussion needs to be public, so that there is a chance to amend the policies if necessary.
The legal reasons was because the Linux Foundation is based in the USA and the targeted devs worked for companies explicitly sanctioned by the USA. Linus said he knew and trusted the devs he was forced to delist.
The Linux Foundation needs to relocate to some stable neutral country like Switzerland.
Linus has never been the best communicator, but he usually speaks the truth. But this is just bonkers and wrong. Not everyone living in Russia has "ties with Russia" other than "they were born there". If this is about sanctions, he could have still just told them that. But instead he just disrespected contributors completely and then double down in it by being xenophobic.
It's really disappointing seeing Russian contributors being disrespected like this, the regime that rules Russia wasn't entirely their fault, and allegiance, nationality, and ethnicity are all clearly different things
Also, wouldn't a state sponsored Russian hacker pretend to be from the US or something anyway? No way they'd contribute code as a Russian, that'd just increase others' suspicion
I agree with Linus a lot too but I strongly disagree here. I hope he's just being made to say this because of government policies
Linux foundation is a US company, and he's a EU citizen and there's companies that those devs where employed that are under sanction , hot that hard to understand
Hate to break it to you, but if you live in Russia and can be useful to the government, they will make you useful. Unless you don't mind you, or your family suffering and dieing, there is no stopping that.
Russia has no law to protect its citizens, only to scare and oppress their citizens. If Russia wants you to do something, such as working in a backdoor in software, you have no choice. So it is a good choice to not leave that door wide open in my opinion.
As to sending me a revert patch - please use whatever mush you call brains. I'm Finnish. Did you think I'd be supporting Russian aggression? Apparently it's not just lack of real news, it's lack of history knowledge too."
Peska perkele right up your asses, Russian trolls.
???
We couped Ukraine in 2014 and their CIA, the SBU is committing acts of terrorism against Russia on at least a bi-weekly basis. Also, they've killed and continue to kill tens of thousands of civilians in the independent republics, for some reason.
The idea that Russia invaded Ukraine for no reason is absolutely brain dead
they’ve killed and continue to kill tens of thousands of civilians in the independent republics
Even if I assume the truth of that statement, do you not care about the deaths of Ukrainian civilians?
We couped Ukraine in 2014
My understanding is that Ukraine's parliament (Rada) removed Yanukovych from his position as president. That seems fair to me. Many countries, including the US, have legal processes for removing their leaders.
Jacobin: Why the Twitter Files Are in Fact a Big DealOn the Left, there’s been a temptation to dismiss the revelations about Twitter’s internal censorship system that have emerged from the so-called Twitter Files project. But that would be a mistake: the news is important and the details are alarming.
finland has pretty bad climate-change-exploitation-fucking-over-the-third-world dealings in my country, despite enforcing seemingly very good stuff inside their own borders so meh, id argue they aint close to the victims they make out to be. some would argue that as a consequence for having a strong socialist influence.
i have mixed feelings about them as a country, but i recognize there are plenty of good (and even well known good) people on there because of the aforementioned good stuff, linus included. for different but not that dissimilar reasons i think contemporary russian citizens should not be blanket banned from helping everyone out.
I'm pretty sure not just the US wants Russia sanctioned to the oblivion. All of the Europe that borders Russia wants that. Now why would it be like that?
That's more like his opinion or a post facto justification. Turns out it is a US thing.
If your company is on the U.S. OFAC SDN lists, subject to an OFAC sanctions program, or owned/controlled by a company on the list, our ability to collaborate with you will be subject to restrictions, and you cannot be in the MAINTAINERS file.
So to get back, you have to basically prove that you have no relations with OFAC SDN companies.
Everyone who disagrees with me is a paid russian troll of course. Nobody would oppose blacklisting people based on nothing but their nationality unless they were getting paid for it.
I guess it's difficult to otherwise explain the position you have? It's not like people face criminal charges in Russia just for speaking against it. It's easy to see how the state would want to introduce backdoors to most western systems.
It's extremely sad that a lot of good Russians get swooped in this. But even abroad their lives are in danger to fight the state.
I doubt if someone wants to introduce a backdoor, they would do that with a russian mailing address. People removed were open and transparent about their nationalities which means there is even less chance them being bad actors than some random guy pretending to be American.
I think you’re making up a world in your head. Who are these “lots” of “good” Russians who are abroad and whose lives are in realistically danger of state assassination? Not that it has never happened, but you’re blowing things out of proportion. Probably Russia does it at a scale roughly similar to the US.
Man, I wish he'd leave the communication to someone else. He is so, so bad at it. And this isn't the first time
The way he attacks critics puts himself in a bad light. But much more importantly, I read this and am still unsure if he has administrative/legal reason, security reasons or political reasons...
If I'd work in Russian propaganda, I'd love this so much. Hope this will not cause disruption in the community.
Yes, the sanctions against Russia, as mentioned by Linus. The change also said the maintainers "can come back in the future if sufficient documentation is provided".
My guess is that the Linux Foundation must ensure that none of the people they work with are in any way associated with any organisation, person or activity on the sanctions list. And that they preemptively removed all maintainers that might risk violating the sanctions while they work with them to establish whether they might be covered by the sanctions or not.
Regardless of what you or they think of the sanctions, they are the law, and I don't think anyone wants the Linux Foundation to have to spend their money on lawyers and fines because they had a maintainer who also worked on a research project funded by a sanctioned entity. (If that is how it works, IANAL)
OK, that's the first reasonable explanation I've come across. I wish Greg Linus didn't reply in that kind of "angry" tone, because for some of us it's not that obvious.
Finland is experiencing suspicious acts of sabotage and disruption and believes Russia is engaged in broad-ranging influence operations against it and other European countries
Since Linus is Finnish, this literally hits home for him, hence (probably) his reaction.
Phobia, by definition, is uncontrollable, irrational, and lasting fear for something. In the current geopolitics situation I'd say that it's not uncontrollable and very much not irrational. Fear, as a fellow Finn, might be a bit strong word, but it's a definetly a concern.
When I first read that I thought that the response is a bit harsh, as Russian (and Soviet Union) individuals have traditionally been a big part of open source community and their achievements on computing are pretty significant, but when you dig a bit deeper on that, a majority of Soviet era things are actually built by Ukrainians in Kyiv (obviously Ukraine as a country wasn't a thing back then).
Also, based on my very limited sight on the matter, Russians are not banned from contributing, but this is more of an statement that anyone working for the government in Russia can't be a part of kernel development team. There's of course legal reasons for that, very much including the trade bans against Russia, but also the moral part of it, which Linus seems to take a stand on.
Personally I've seen individuals at Russia to do quite amazing feats with both hardware and software, but as none of us are in a void without any external infcluence nor affect, I think that, while harsh, the "sanctions" (for a lack of better word) aren't overshooting anything, but they're instead leveling the playing field. Any Joe Anynymous could write a code which compromises the kernel as a whole, but should that Joe live in Russia, it might bring a government backed team which can hide their tracks on a quite a bit different level with their resources than any individual could ever even dream about.
So, while that decision might slow down some implementations and it might include some of the most capable of developers, the fear that one of them might corrupt the whole project isn't unreasonable and, with ongoing sanctions in place (and legal requirements that follow) the core dev team might not even have a choice on this.
In current global environment we're living in, I'd rather have a bit too careful management than one which doesn't take things seriously enough. We already have Canonical and others to break stuff way too often, we don't need malicious government to expand on that with nefarious purposes which could compromise a shit on of stuff on a very fundamental level if left unattended.
I'd really like to see the criteria for delisting people, though. As Russia is not the only one waging wars, there are worse countries out there. I guess it all boils down to Linus being from Finland.
If your company is on the U.S. OFAC SDN lists, subject to an OFAC sanctions program, or owned/controlled by a company on the list, our ability to collaborate with you will be subject to restrictions, and you cannot be in the MAINTAINERS file.
That sounds like an advice, not something official? Also why is an open source project affected by US sanctions? It's not an US open source project, or is it?
He alludes to sanctions being a factor but never clarifies on advice from his lawyers. ngl I don't like the look of it just from a transparency perspective.
I understand, thank you. My statement kind of assumes north korea is maintaining a fork of the kernel they patch and customize. It also implies NK is one of the few organizations that would accept russian contributions into their fork, given the somewhat limited number of linux projects operating outside of the sanctions.
Hm i never coded a line in my life, but i always wondered so honest question to the experts here: is it realistic that someone codes security back doors so hidden in other bad or wrong documented code, that nobody recognizes it in OSS community? I mean code is getting more complicated and specialized, dont you need more and more human resources (more than one person and hopefully not all with a bad intention) to check over that code? If im correct you shouldnt let more code into your software than the community is able to check an validate several times... Doesnt mean it has to be russians that need to be excluded idk
Yes, not only is it realistic, it has actually happened. It's easier to write code than understand it. Even when reviewing code, you miss more or less obvious issues. Not to mention intentional vulnerabilities that can be sneaked in over multiple commits and time span long enough to make reviewers forget the larger context.
There will be a million security issues across all OSS. Some of it will be intentional; if so definitely don’t expect it to be a “findable” back door. It will be a set of vulnerabilities across several projects, that when combined allow the perpetrators privilege-escalations or a known path through a security system. Removing “Russians” from contribution doesn’t actually stop that, everyone can use a VPN and work as an American or whatever, but it does send a signal.
This might not be super useful if you don't write code but I always found the contest submissions fun to read and try to figure out for the https://www.underhanded-c.org/ contest.
They break down and explain the runner up and finalist for each year and how the attack works. It's usually something very subtle that most people wouldn't catch.
Is this really Linux drama though? It seems more like political drama that ended up jizzing on Linux.
I mean, yeah, there's been drama after the decision was made based on legal issues brought about by political drama, but this part of it isn't, if you get the distinction.
The only real linux drama part, as far as I can see is the crappy way it was announced, which isn't what most of the people involved in the drama after the fact are complaining about.
I dunno, I'm not complaining about the post here, just talking about the overall issue itself using the post as a jumping point.
The context is that a partial descendant of an enemy species (Romulans) was the victim of a witch hunt. He was half human and a starfleet officer. He had lived in the federation his whole life.
A real world equivalent example to that would be banning Americans with Russian ancestry that were born in America and lived in America their whole lives from contributing.
That is not what's happening here. You are arguing in bad faith. Picard would be perfectly fine with preventing Romulans in the Romulan Empire from accessing/modifying sensitive technology.
How does this prevent the Russians from accessing sensitive technology? Oh it doesn't! It just excludes them from contributing to Linux, not from using it.
Accusing others from "arguing in bad faith" are we?
I don't think there's any possibility of useful discussion of linux happening here so we may as well discuss that.
The tension between the various meanings of the word "liberal" is complex, and it very much depends on the context. Historically, liberalism referred to political philosophies that featured liberty — individual autonomy and freedom — as their central ideal. It was the idea that the state and other organizing powers should be generously permissive, allowing all to do as they please to the greatest extent deemed possible. Over time the word has sometimes come to instead be more closely associated with narrow kinds of liberty, such as the freedom of the ruling classes to exploit everyone else. In an American context over the course of the 20th century it came to have particular connotations of hypocrisy as reflected for example in the lyrics of that Phil Ochs song you've probably heard. These days it is sometimes even used as shorthand for what was previously called "neoliberalism." Its meanings can range even further into the unorthodox. In this thread for example, its use is more likely to convey a message along the lines of "this affront to Glorious Mother Russia has made me all pissy."