The developers for LoongArch are dope as hell and it's sad to see these accusations be leveled at them entirely because they're Chinese.
technology
On the road to fully automated luxury gay space communism.
Spreading Linux propaganda since 2020
- Ways to run Microsoft/Adobe and more on Linux
- The Ultimate FOSS Guide For Android
- Great libre software on Windows
- Hey you, the lib still using Chrome. Read this post!
Rules:
- 1. Obviously abide by the sitewide code of conduct. Bigotry will be met with an immediate ban
- 2. This community is about technology. Offtopic is permitted as long as it is kept in the comment sections
- 3. Although this is not /c/libre, FOSS related posting is tolerated, and even welcome in the case of effort posts
- 4. We believe technology should be liberating. As such, avoid promoting proprietary and/or bourgeois technology
- 5. Explanatory posts to correct the potential mistakes a comrade made in a post of their own are allowed, as long as they remain respectful
- 6. No crypto (Bitcoin, NFT, etc.) speculation, unless it is purely informative and not too cringe
- 7. Absolutely no tech bro shit. If you have a good opinion of Silicon Valley billionaires please manifest yourself so we can ban you.
Racism against people from China is hot nowadays
LoongArch is awesome and the people I've chatted with who work on various things related to it have been awesome and very helpful. I hope one day I can get my hands on a LoongArch laptop even though I unfortunately live in the states.
Taking a stroll through the comments,
So, it turns out that someone who gained great amounts of trust has put malicious code into a widespread package. Sucks hard. It's understandable to also look at those who worked with them on the same things...
He seems to be participating to Loongsong Chinese architecture
Oh no. Oh no no no, the is here too! Quickly, be weird about people from China!
Wow it's crazy how many different core areas of Linux code is beeing changed to cope with Loongsong LoongArch.
"cope" lmao, also wow adding a completely new architecture requires a lot of work in a lot of areas, how crazy!
Later they were explained that their concern isn't justified (the people mentioned have turned out to be real and working on the arch support without NDAs or stuff), including people from China taking note of this tendency:
Yeah, China! China! When something involves a random Chinese, it always unfolds with accusation out of thin air.
Damn, that's a slick bit of work.
If you're not on a Debian or Red Hat based distribution, you're most likely fine because of some precondition checks in the malicious build script:
if test -f "$srcdir/debian/rules" || test "x$RPM_ARCH" = "xx86_64"; then
I'd still recommend you update either way, Arch Linux and Gentoo patched/masked their packages as well even though they were essentially unaffected for various reasons. The original maintainer also made an acknowledgement on the project's official website with some additional information as well.