“They introduce kernel bugs on purpose”

Re:“They introduce kernel bugs on purpose” by dd82 on Wednesday April 21, 2021 @07:01AM (#26887887)

>>>On the Feasibility of Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits Qiushi Wu, and Kangjie Lu. To appear in Proceedings of the 42nd IEEE Symposium on Security and Privacy (Oakland'21). Virtual conference, May 2021.

from Lu's list of publications at https://www-users.cs.umn.edu/~kjlu/

Seems like a conference presentation at IEEE at minimum?

[ Parent | on HN ]

Re:“They introduce kernel bugs on purpose” by xucheng on Wednesday April 21, 2021 @08:36AM (#26888824)

IEEE S&P is actually one of the top conferences in the field of computer security. It does mention some guidance on ethical consideration.

> If a paper raises significant ethical and/or legal concerns, it might be rejected based on these concerns.

https://www.ieee-security.org/TC/SP2021/cfpapers.html

So if the kernel maintainers report the issue to the S&P PC, the paper could potentially be rejected.

[ Parent | on HN ]

Re:“They introduce kernel bugs on purpose” by corty on Wednesday April 21, 2021 @07:29AM (#26888160)

Which shows that IEEE also has a problem with research ethics if they accepted such a paper.

[ Parent | on HN ]

Re:“They introduce kernel bugs on purpose” by svarog-run on Wednesday April 21, 2021 @07:49AM (#26888345)

IEEE is a garbage organization. Or atleast their India chapter is. 3 out of 5 professors in our university would recommend to avoid any paper published by Indians from IEEE. Here in India, publishing trash papers with the help of one's 'influence' is a common occurrence

[ Parent | on HN ]

Re:“They introduce kernel bugs on purpose” by anonymousDan on Wednesday April 21, 2021 @08:20AM (#26888632)

Wow, that is basically the top computer security conference.

[ Parent | on HN ]