• halva@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    88
    arrow-down
    3
    ·
    11 个月前

    Using Russian malware to avoid Israeli malware utilizing backdoors left by American three letter orgs. Gotta love international collaboration.

  • gravitas_deficiency@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    56
    arrow-down
    6
    ·
    11 个月前

    Simply because kaspersky is based in Russia, you should not use kaspersky. I’d be shocked if the FSB hasn’t forced them to build in backdoors at this point.

      • gravitas_deficiency@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        45
        arrow-down
        4
        ·
        11 个月前

        The government under which a corporate entity operates has direct and meaningful impact on a lot of things about said company. For instance: US companies are subject to ITAR regulations, and there are MASSIVE penalties for breaching those laws. Russia is a totalitarian surveillance state, so I wouldn’t trust any security software from a Russian company. Much the same way that I wouldn’t trust any logic design or 3D modeling software coming out of a major Chinese company, because the CCP has a long and storied history of stealing and reverse engineering shit that they’re not legally allowed to.

        • StarDreamer@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          14
          ·
          edit-2
          11 个月前

          Out of curiosity what do you think of Nginx, which was Russian based and used to have its main offices in Russia (that also got raided by Russian police) or Arch Linux, where one of the main packagers (up to 30% of official packages) is managed by Felix Yan (which I believe is a Chinese citizen)? Where is the line drawn? Is it only for profit companies, security software, or something specific?

          • BassTurd@lemmy.world
            link
            fedilink
            English
            arrow-up
            29
            ·
            11 个月前

            Both examples you listed are open source, so anyone can review their code. No government can dictate what gets published to the code, and if they can, it will be noticed and get forked.

            • StarDreamer@lemmy.blahaj.zone
              link
              fedilink
              English
              arrow-up
              13
              arrow-down
              1
              ·
              11 个月前

              This probably sounds pedantic but based on this the issue isn’t that the software is Russian. It’s that the software is under the regulation of an authoritarian government (which is Russia)

              • gravitas_deficiency@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                15
                ·
                11 个月前

                Precisely. If kaspersky were 100% open source, I would not have said what I did. But it’s closed source, and it’s owned by a Russian company, subject to Russian laws, and Russia is a authoritarian state, hostile to most of the world at this point - either directly or indirectly - so one would be forgiven for assuming the worst, in terms of what was put in the code at the FSB’s behest.

              • SheeEttin
                link
                fedilink
                English
                arrow-up
                2
                ·
                11 个月前

                Correct, but it’s a distinction without a difference.

                • StarDreamer@lemmy.blahaj.zone
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  11 个月前

                  The difference is that someone from one of the countries we’ve discussed can contribute to software projects that they like, without fear of rejection for simply who they are.

                  And that matters to a lot of people, including me. Not everyone is lucky like you all of being born in the right place at the right time.

            • StarDreamer@lemmy.blahaj.zone
              link
              fedilink
              English
              arrow-up
              5
              ·
              11 个月前

              Nginx is 2-clause BSD, which I would argue is more “Open Source” than Arch Linux (official repo contains proprietary components such as discord, steam, multimedia codecs). You could argue that the majority of it (and it’s build system) is open source, but probably not “Arch Linux” is fully Open Source.

      • eskimofry@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        2
        ·
        11 个月前

        Just because it exists doesn’t mean you should use it? You sound like a horny hamster.