Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Zha6C3RExPyp8iBd@kitenet.net>
Date: Wed, 10 Apr 2024 12:10:51 -0400
From: Joey Hess <id@...yh.name>
To: Alejandro Colomar <alx@...nel.org>
Cc: oss-security@...ts.openwall.com, Sam James <sam@...too.org>,
	Jonathan Nieder <jrnieder@...il.com>,
	Andres Freund <andres@...razel.de>,
	Lasse Collin <lasse.collin@...aani.org>, xz@...aani.org,
	secalert@...hat.com, team@...urity.debian.org
Subject: Re: Analysis on who is Jia Tan, and who he could work for, reading
 xz.git

Alejandro Colomar wrote:
> I suspect those +0200 and +0300 correspond to a few times that this guy
> would have traveled to his intelligence agency for some special work

That's a theory. But many of the commits with author Jia Tan in those
time zones have committer Lasse Collin, and show signs of being eg,
git-amed patch sets which may have also been rebased. In which case
it would make sense that these have Lasse Collin's usual timezone.

I analized that here: https://hachyderm.io/@joeyh/112193146103113070

-- 
see shy jo

Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.