oss-sec mailing list archives
Re: Malicious commits to Linux kernel as part of university study
From: David H <ispcolohost () gmail com>
Date: Thu, 22 Apr 2021 14:55:03 +0000
Has anyone reported this to https://research.umn.edu/ethics-compliance/reporting-research-misconduct ? On 4/22/21, 3:00 AM, "Peter Bex" <peter () more-magic net> wrote: Hi all, Probably a lot of you know this already but I consider it serious enough to point out to the OSS security community at large. The university of Minnesota has been banned from making any commits to the Linux kernel after it was found out they'd been submitting bogus patches to the LKML to knowingly introduce security issues: https://lore.kernel.org/linux-nfs/YH%2FfM%2FTsbmcZzwnX () kroah com/ They also published a paper: https://raw.githubusercontent.com/QiushiWu/qiushiwu.github.io/main/papers/OpenSourceInsecurity.pdf I don't know the scope of this research, but it could involve other OSS projects, now or in the future, as well. Hence this e-mail. If you feel it's spam or needless drama, feel free to ignore. Cheers, Peter
Current thread:
- Re: Malicious commits to Linux kernel as part of university study, (continued)
- Re: Malicious commits to Linux kernel as part of university study Ariadne Conill (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study r00t4dm (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study Mark Steward (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study Michael Orlitzky (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study Francis Booth (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study Eric Biggers (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study Jan Engelhardt (Apr 23)
- Re: Malicious commits to Linux kernel as part of university study Kurt H Maier (Apr 23)
- Re: Malicious commits to Linux kernel as part of university study James Feister (Apr 23)
- Re: Malicious commits to Linux kernel as part of university study Greg KH (Apr 23)
- Re: Malicious commits to Linux kernel as part of university study Marcus Meissner (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study Marcus Meissner (Apr 22)
- Re: Malicious commits to Linux kernel as part of university study Silas (Apr 24)
- Re: Malicious commits to Linux kernel as part of university study Thomas Ward (Apr 24)