A press release from the College of Minnesota Division of Pc Science & Engineering:
Management within the College of Minnesota Division of Pc Science & Engineering discovered at the moment in regards to the particulars of analysis being carried out by one among its college members and graduate college students into the safety of the Linux Kernel. The analysis technique used raised critical issues within the Linux Kernel neighborhood and, as of at the moment, this has resulted within the College being banned from contributing to the Linux Kernel.
We take this example extraordinarily critically. Now we have instantly suspended this line of analysis. We are going to examine the analysis technique and the method by which this analysis technique was accepted, decide applicable remedial motion, and safeguard towards future points, if wanted. We are going to report our findings again to the neighborhood as quickly as sensible.
This story is loopy. It seems researchers from the College of Minnesota had been deliberately attempting to introduce vulnerabilities into the Linux kernel as a part of some analysis examine. This was, after all, found, and kernel maintainer Greg Kroah-Hartman instantly banned the whole college from submitting any code to the Linux kernel. Replying to the researcher in query, Kroah-Hartman wrote:
You, and your group, have publicly admitted to sending known-buggy patches to see how the kernel neighborhood would react to them, and printed a paper based mostly on that work.
Now you submit a brand new sequence of obviously-incorrect patches once more, so what am I supposed to consider such a factor?
They clearly had been _NOT_ created by a static evaluation device that’s of any intelligence, as all of them are the results of completely totally different patterns, and all of that are clearly not even fixing something in any respect. So what am I purported to suppose right here, aside from that you just and your group are persevering with to experiment on the kernel neighborhood builders by sending such nonsense patches?
Our neighborhood doesn’t recognize being experimented on, and being “examined” by submitting recognized patches which might be both do nothing on goal, or introduce bugs on goal. When you want to do work like this, I counsel you discover a totally different neighborhood to run your experiments on, you aren’t welcome right here.
Due to this, I’ll now need to ban all future contributions out of your College and rip out your earlier contributions, as they had been clearly submitted in bad-faith with the intent to trigger issues.
That is clearly the one right plan of action, and the swift response by the college is the correct one.