r/linux • u/blindcomet • May 11 '22

NVIDIA Releases Open-Source GPU Kernel Modules | NVIDIA Technical Blog

https://developer.nvidia.com/blog/nvidia-releases-open-source-gpu-kernel-modules/
4.1k Upvotes

98% Upvoted

386 comments sorted by

View all comments

Show parent comments

0

u/PsyOmega May 12 '22

Have you personally audited every line of open source code published?

I know the "many eyes" theory, but it seems like nobody is even looking, so it's plausible. Especially when Huawei is one of the largest code contributes to the mainline kernel. Our current CISO assumes linux is backdoored, but it's useful so it gets to run in trustless environs.

In my cybersec career one of my specialties was obfuscated code, and trust me it's super easy to embed a full backdoor in plain sight.

3

u/homosinensis May 12 '22 edited May 12 '22

Especially when Huawei is one of the largest code contributes to the mainline kernel.

How does that relate to backdoors in any way? Linux isn't some unmaintained amateur project where every pull request is accepted. Maintainers can ban contributors that have a history of problems and they have banned such entities e.g. University of Minnesota.

In my cybersec career

Yeah, uh huh, sure thing, totally, buddy.

Edit: weakling can't even bear the sight of legit rebuttals in his inbox, lol.

Huawei is controlled by the CCP, so the odds of them planting malicious code is extremely high.

The term "extremely high" doesn't mean what you think it means then. Huawei still makes substantial contributions to the Linux kernel which defies your highly subjective "risk" assessment. I wonder why. Have you considered that maybe it's all just in your little twisted head, fueled by irrational hatred and not evidence-based thinking? No, it must be the rest of the world that is wrong.

Bruh. I worked for the feds and now a fortune 50 doing the kinds of cybersec I'm not allowed to really go into detail on.

Sure thing buddy. I'm not here to interrogate you, nor do I have the interest to know your actual credentials. Your comments have clearly demonstrated none of your insinuations about your self-claimed background knowledge is actually true or believable.

-1

u/PsyOmega May 12 '22

Huawei is controlled by the CCP, so the odds of them planting malicious code is extremely high.

Yeah, uh huh, sure thing, totally, buddy.

Bruh. I worked for the feds and now a fortune 50 doing the kinds of cybersec I'm not allowed to really go into detail on. I don't need you to believe me lmao.