• YeetPics@mander.xyz
    link
    fedilink
    English
    arrow-up
    51
    arrow-down
    15
    ·
    22 days ago

    I don’t understand the benefit in doing this.

    Security. Torvalds did this for security.

    Is it really that hard to parse?

    • r00ty@kbin.life
      link
      fedilink
      arrow-up
      16
      arrow-down
      18
      ·
      22 days ago

      And I’ll say the same here as I did above. If it was for security, their code is tainted too. It’s an arbitrary reaction that is not complete as a solution to anything.

      • walden@sub.wetshaving.social
        link
        fedilink
        English
        arrow-up
        17
        arrow-down
        3
        ·
        22 days ago

        They can check existing code. You have to be able to trust people who are contributing.

        They can check new code by these risky people as it comes in, but it why risk it?

      • YeetPics@mander.xyz
        link
        fedilink
        English
        arrow-up
        4
        ·
        22 days ago

        You can’t untaint code if the tainters (lol that sounds funny) can still edit the code.

        If Torvalds is correct (he is), patching can now take place for vulnerabilities.

        Good point!

        • r00ty@kbin.life
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          22 days ago

          Well it seems it was more to do with sanctions, if the open letter from one of the chopped developers is to be believed. In which case, I think the right thing is to move the names to contributors (they did still contribute), remove them from maintainers (some maintainers are actually paid by the foundation, I mean not a lot, but some are paid).

          I still find it all a little odd. But likely there was a bit of a prod from somewhere higher as to how sanctions should be followed.