this post was submitted on 07 Jan 2025
601 points (96.7% liked)

linuxmemes

21741 readers
384 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack members of the community for any reason.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
  •  

    Please report posts and comments that break these rules!


    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't fork-bomb your computer.

    founded 2 years ago
    MODERATORS
     

    The NSA, the original primary developer of SELinux, released the first version to the open source development community under the GNU GPL on December 22, 2000.[6] The software was merged into the mainline Linux kernel 2.6.0-test3, released on 8 August 2003. Other significant contributors include Red Hat, Network Associates, Secure Computing Corporation, Tresys Technology, and Trusted Computer Solutions.

    https://en.wikipedia.org/wiki/Security-Enhanced_Linux

    you are viewing a single comment's thread
    view the rest of the comments
    [–] [email protected] 16 points 1 day ago (2 children)

    Wasn't Signal messenger also funded by the NSA+DARPA? And TOR too?

    Anti Commercial-AI license

    [–] [email protected] 12 points 1 day ago* (last edited 1 day ago) (2 children)

    Signal is weird about actually allowing others to reproduce the APK builds.

    Specifically, they are the kind of weird about it that one would expect if the Signal client app had an NSA back-door injected at build time.

    This doesn't prove anything. It just stands next to anything and waggles it's eyebrows meaningfully.

    [–] [email protected] 7 points 1 day ago (1 children)

    Do you have more recent information by Signal on the topic? The GitHub issue you linked is actually concerned with publicly hosting APKs. They also seem to have been offering reproducible builds for a good while, though it's currently broken according to a recent issue.

    [–] [email protected] 5 points 1 day ago* (last edited 1 day ago)

    I had a hard time choosing a link. Searching GitHub for "F-Droid" reveals a long convoluted back-and-forth about meeting F-Droid's requirements for reproducible builds. Signal is not, as of earlier today, listed on F-Droid.

    F-Droid's reproducibility rules are meant to cut out the kind of shenanigans that would be necessary to hide a back door in the binaries.

    Again, this isn't proof. But it's beyond fishy for an open source security tool.

    Edit: And Signal's official statements on the topic are always reasonable - but kind of bullshit.

    Reasonable in that I alwould absolutely accept that answer, if it were the first time that Signal rejected a contribution to add it to F-Droid.

    Bullshit in that it's been a long time, lots of folks have volunteered to help, and Signal still isn't available on F-Droid.

    [–] [email protected] 6 points 1 day ago* (last edited 1 day ago) (1 children)

    There was a "ultra private" messaging app that was actually created by a US state agency to catch the shady people who would desire to use an app promising absolute privacy. Operation "Trojan Shield".

    The FBI created a company called ANOM and sold a "de-Googled ultra private smartphone" and a messaging app that "encrypts everything" when actually the device and the app logged the absolute shit out of the users, catching all sorts of criminal activity.

    I have no proof, but I do have a small list of companies I actually suspect of pulling a similar stunt... perhaps not necessarily attached to the FBI or any other agency, but something about their marketing and business model screams "fishing for people who have something to hide"

    [–] [email protected] 4 points 1 day ago

    The fact that it is a paid product should have been their first clue it was a honeypot.

    [–] [email protected] 5 points 1 day ago

    no. and tor was originally funded by the navy…
    ….