4 ms·
How do you know it is a guy, and it is Chinese?
by ddalex 3y ago
How do you know it is a guy, and it is Chinese?
- toxik 3y agoI take it you haven’t looked into the details of this, there is no proof but there is strong evidence in name choice, language use and the MO.
- jeltz 3y agoName choice I disagree with. The attacker used at least Chinese, Indian and Scandinavian names when working on this. It is possible we can find out something by doing a statistical analysis of the language but as far as I know no such analysis has been done. Edit: A Russian sounding alias was also used.
- kijin 3y agoMy current hypothesis is that the attacker(s) deliberately chose a Chinese-sounding name to make people jump to conclusions. A sophisticated state actor would be no stranger to making their actions look like somebody else's. Or maybe they actually are Chinese, and want me to believe the sentence above. :)
- lodovic 3y agoIndeed - seeing the level of sophistication and long term thinking behind this attack, it seems everything about it was planned meticulously, including usernames, attack vectors, communication with the community, and when to commit the parts of the exploit. There's probably a full team of people behind it and attributing it to China because of the username may be too quick.
- t-sauer 3y agoThat is rather naive thinking. Making up a misleading identity is probably one of the first things someone with such a long term plan would do.
- raverbashing 3y agoAnd time zone as well it seems
- bdhcuidbebe 3y agoI strongly disagree. If you scratch the surface you find ”misoeater” and some russian sounding user names, and even a danish name. These are all fake profiles and gives us no information about the bad actor. Spreading doubt is taught in bad actor-academy.
- nindalf 3y agoAt best there’s an account with a Chinese sounding name. I’m never going to carry water for the PLA or the CCP, but I’d need to see stronger evidence before agreeing it’s them.
- mathfailure 3y agoWhat about water for ZND or CBSOM?
- nindalf 3y agoIf you’re implying that I used incomprehensible initialisms, I’d argue that they’re easily understandable in the context of an alleged state sponsored attack from China. I think your comment is facetious and adds nothing to the conversation.
- mathfailure 3y agoI as well think your comment adds nothing to the conversation. Neither this one, nor the previous one.
- cpach 3y agoGood point. We just don’t know.
- rurban 3y agoHe is Taiwanese. At least he posted on Taiwanese boards. Jie would be female, Jia male
- yorwba 3y agoOccurrences of "jiat0218" on Taiwanese websites are clearly copypasta from some other website that's probably defunct now. While gendered names do exist, you can't easily tell from the romanization, it depends on the exact characters used. And most likely "Jia" is the surname, or rather the romanization of one of five different surnames.
- programmeruser 3y agoTan is a common Chinese surname that's the Hokkien/Teochew transliteration of Chen. It's more commonly seen in overseas Chinese but I wouldn't jump to any conclusions
- mrintegrity 3y agoIn other discussions the Chinese person in question has been spoken about at length
- twno1 3y agoThe commit history from bad actor set tomezone to +0800 Source: https://boehs.org/node/everything-i-know-about-the-xz-backdoor https://boehs.org/node/everything-i-know-about-the-xz-backdo...
- lco 3y ago> It’s most likely our actor just mashed plausible-sounding Chinese names together. Also from that writeup. It also links to https://rheaeve.substack.com/p/xz-backdoor-times-damned-times-and https://rheaeve.substack.com/p/xz-backdoor-times-damned-time... which suggests the actual TZ of 'Jia Tan' to be UTC+02/03