I want to point out that they could similarly hire someone working at microsoft, or get someone up for a position there, to do this and it would be at least as hard to detect...

Large companies like Microsoft assume that there are advanced persistent threats that are willing to place HUMINT inside of their companies. The companies have dedicated internal teamd focused on detecting them.

For example, Twitter recently fired someone that was leaking information on dissidents to a foreign government.

I wonder if they would do that if the leak was to their own government.

You could, but it would be more difficult (though easily within the ability of the NSA).

To contribute to the Windows kernel you'd have to get someone hired by Microsoft, who presumably check their employment history (maybe), they have to actually go and work for Microsoft, etc. Obviously none of that is impossible but it's also obviously much harder than sending a patch to a mailing list.

Or you find someone who already works there who's having an affair and blackmail them into working for you. It's no different to how spies have operated for centuries.

Although possible, they don't have to given how many bugs Linux developers already put in on a regular basis:

https://events.linuxfoundation.org/wp-content/uploads/2017/1...

That is scary.

I’m sure they make the flaws look like honest mistakes, and whatever gets found by someone else is simply patched with a “bugfix” commit.

The Wests' military-industrial-pharmaceutical complex has weaponised groupthink to such an extent that the ease by which incitement of mass hysteria at scale can be manifested is a non-issue for these players.

Too many times, the western collective is convinced of its own righteousness in regards to issues which factually were counter to its own survival.

The point is, even if the NSA did have key Linux devs on its roster, we don't have the tools - as the unwashed masses - to counter it. Besides which, the Linux kernel is hardly the right target - compilers, however, are...