News for hackers. Stuff that matters.
Re:OnlyOffice: Free open source office suite with business p... by squarefoot on Monday October 02, 2023 @04:32AM (#37735412)
Motivation plays a role here. I'm not defending in any means what the US, Israel and many other countries have done or are doing to others, but today, as we are writing, Russia is probably more motivated to harm western businesses by hitting common people than the US or Israel or any other country, except maybe China to a much lesser extent.
Re:OnlyOffice: Free open source office suite with business p... by markjonsona989 on Monday October 02, 2023 @05:04AM (#37735674)
How are they hurting western businesses by releasing OSS? We already have LibreOffice. What is the point of your comment?
Re:OnlyOffice: Free open source office suite with business p... by dingi on Monday October 02, 2023 @05:09AM (#37735699)
Sure, they are OSS but how do you know what goes into their binaries? Being open source does not imply that the binaries are not backdoored.
Re:OnlyOffice: Free open source office suite with business p... by rmbyrro on Monday October 02, 2023 @05:42AM (#37735972)
Wouldn't it be relatively trivial for someone to compile, compare checksums and call them out?

It's more likely they'd introduce a security flaw that is hard to detect in the OSS code. If someone finds, they'd just claim it was a security incident which is now fixed (and then they'd move to another masked flaw).

Re:OnlyOffice: Free open source office suite with business p... by nicoburns on Monday October 02, 2023 @05:55AM (#37736068)
> Wouldn't it be relatively trivial for someone to compile, compare checksums and call them out?

Generally not. Most software does not have reproducible builds, so the checksums would be unlikely to match.

Re:OnlyOffice: Free open source office suite with business p... by robertlagrant on Monday October 02, 2023 @06:05AM (#37736142)
> Sure, they are OSS but how do you know what goes into their binaries? Being open source does not imply that the binaries are not backdoored.

Then build your own binaries. I'm sure the Russian government wouldn't struggle to do this.

Re:OnlyOffice: Free open source office suite with business p... by DrScientist on Monday October 02, 2023 @05:51AM (#37736041)
In terms of motivation - I think it's more likely that Russia is more motivated to be independent of American controlled software.

Open source == a level of independence from sanctions and foreign government spying.