HENTAI CAN JOG 🍆🥫🏃
NINJA HATE COG 🥷😡⚙️
A JOINT CHANGE 🚬🔄
HANG IT CEO JAN 🕴️
GAIN JET NACHO ✈️🥙➕
GOAT-CHIN JANE 🧔♀️
GONNA CITE HAJ 🎙️🦈❞
ANCIENT HAG JO 🧙🏻♀️
ENJOING A CHAT 😄💬
Former maintainer of the .xz project for about a year or two. Hid a backdoor into the code that almost made it into many bigger distros if it wasn't found by a Microsoft employee.
More specifically, it's the name used by the attacker. Could well be multiple people, or if it's one person (still almost certainly state-funded, but the state can fund one person), a fake name nevertheless. We have no info about this person's real life identity. They used a VPN in Singapore, and some people have looked at the times of the commits to try guess a timezone, though that's not foolproof as they could've just been a nocturnal person, or even tried to schedule commits to happen at a time to suggest they're in a different timezone, though I think the latter is unlikely and overkill.
11 Comments
tetris11@lemmy.ml · 30 pts · 2y
JIA CHEONG TAN
TEACHING JOAN
ChaoticNeutralCzech@feddit.de · 50 pts · 2y
HENTAI CAN JOG 🍆🥫🏃
NINJA HATE COG 🥷😡⚙️
A JOINT CHANGE 🚬🔄
HANG IT CEO JAN 🕴️
GAIN JET NACHO ✈️🥙➕
GOAT-CHIN JANE 🧔♀️
GONNA CITE HAJ 🎙️🦈❞
ANCIENT HAG JO 🧙🏻♀️
ENJOING A CHAT 😄💬
MargotRobbie@lemmy.world · 27 pts · 2y
Wait a minute:
CIA AGENT JOHN
I TAG JOHN CENA
The real answer is right in front of us all along. He played us all for fools.
stebo02@lemmy.dbzer0.com · 19 pts · 2y
Wilmo@lemmy.world · 21 pts · 2y
Former maintainer of the .xz project for about a year or two. Hid a backdoor into the code that almost made it into many bigger distros if it wasn't found by a Microsoft employee.
communism@lemmy.ml · 16 pts · 2y
More specifically, it's the name used by the attacker. Could well be multiple people, or if it's one person (still almost certainly state-funded, but the state can fund one person), a fake name nevertheless. We have no info about this person's real life identity. They used a VPN in Singapore, and some people have looked at the times of the commits to try guess a timezone, though that's not foolproof as they could've just been a nocturnal person, or even tried to schedule commits to happen at a time to suggest they're in a different timezone, though I think the latter is unlikely and overkill.
stebo02@lemmy.dbzer0.com · 7 pts · 2y
Hovenko@iusearchlinux.fyi · 6 pts · 2y
Yep seems like a bigger organisation being involved considering fact that this was brewing 2+ years.
HottieAutie@lemmy.dbzer0.com · 10 pts · 2y
i think it's the person that snuck in the xz vulnerability
possiblylinux127@lemmy.zip · -51 pts · 2y
0ops@lemm.ee · 54 pts · 2y
If you used an even number of /s does that make your comment sincere?
Viking_Hippie@lemmy.world · 39 pts · 2y
Complaining about Reddit content on Lemmy, how creative.
HobbitFoot@thelemmy.club · 17 pts · 2y
The Internet is just screenshots of social media on other social media.
jaybone@lemmy.world · 2 pts · 2y
No posts can escape The Reddit Police.