Re: Malicious commits to Linux kernel as part of university study

[Marcus Meissner <meissner () suse de>]

Hi,

https://twitter.com/UMNComputerSci/status/1384948683821694976

Ciao, Marcus


On Thu, Apr 22, 2021 at 02:55:03PM +0000, David H wrote:
> Has anyone reported this to https://research.umn.edu/ethics-compliance/reporting-research-misconduct ?
>
>
> On 4/22/21, 3:00 AM, "Peter Bex" <peter () more-magic net> wrote:
>
>     Hi all,
>
>     Probably a lot of you know this already but I consider it serious enough
>     to point out to the OSS security community at large.
>
>     The university of Minnesota has been banned from making any commits to
>     the Linux kernel after it was found out they'd been submitting bogus
>     patches to the LKML to knowingly introduce security issues:
>     https://lore.kernel.org/linux-nfs/YH%2FfM%2FTsbmcZzwnX () kroah com/
>
>     They also published a paper:
>     https://raw.githubusercontent.com/QiushiWu/qiushiwu.github.io/main/papers/OpenSourceInsecurity.pdf
>
>     I don't know the scope of this research, but it could involve other OSS
>     projects, now or in the future, as well.  Hence this e-mail.  If you feel
>     it's spam or needless drama, feel free to ignore.
>
>     Cheers,
>     Peter