3 ms·

It seems like Lasse Collin is back on the scene and maybe pissed?

Dalewyn 3y ago
If he is innocent and a victim as much as everyone else in all this, I won't blame him for wanting blood. Most of us are humans after all, and being social creatures we tend to take violations of trust quite deeply.
- danielhlockard 3y ago
  Truly seems that way currently. He said he'd really dig in starting next week and just checked his email on vacation and saw this whole mess.
  - asveikau 3y ago
    It may be hard for him to re-establish trust. Maintaining xz for more than a decade then doing this would be quite a "long con" but if HN threads are any indication, many will still be suspicious. His commits on these links look legit to me. It's a sad situation for him if he wasn't involved.
    - londons_explore 3y ago
      The fact GitHub suspended his account too suggests that they might have info saying he is involved.
      - cricalix 3y ago
        Or you know, they just reacted with a ban hammer on all accounts related to xz and to heck with innocence.
      - sReinwald 3y ago
        Personally, I doubt that. I would assume that GitHub just banned all accounts that were directly associated with the project as a precaution.
      - asveikau 3y ago
        I think it was somewhat irresponsible to block everything. It hampers instigation of the repo's history. It's good that Lasse had another mirror.
        asveikau 3y ago
        Woops, too late to edit this comment and say *investigation
    - delfinom 3y ago
      Honestly, he should call it quits and just drop xz utils and move on with life. He maintained it for 15 years and struggled to get anyone else to help until Jia showed up. Meanwhile the Linux ecosystem depended on it. The Linux ecosystem will either figure shit out and maintain it or move into a different archive library.
TLLtchvL8KZ 3y ago
I worry about his home/personal system, this guy seems to have befriended Lasse in order to get the position, is it possible Lasse himself has been compromised? I'd be nuking everything, possibly even disposing of hardware and setting up a new verifiable online identity on a clean system/hardware.

If he is innocent and a victim as much as everyone else in all this, I won't blame him for wanting blood. Most of us are humans after all, and being social creatures we tend to take violations of trust quite deeply.

danielhlockard 3y ago
Truly seems that way currently. He said he'd really dig in starting next week and just checked his email on vacation and saw this whole mess.
- asveikau 3y ago
  It may be hard for him to re-establish trust. Maintaining xz for more than a decade then doing this would be quite a "long con" but if HN threads are any indication, many will still be suspicious. His commits on these links look legit to me. It's a sad situation for him if he wasn't involved.
  - londons_explore 3y ago
    The fact GitHub suspended his account too suggests that they might have info saying he is involved.
    - cricalix 3y ago
      Or you know, they just reacted with a ban hammer on all accounts related to xz and to heck with innocence.
    - sReinwald 3y ago
      Personally, I doubt that. I would assume that GitHub just banned all accounts that were directly associated with the project as a precaution.
    - asveikau 3y ago
      I think it was somewhat irresponsible to block everything. It hampers instigation of the repo's history. It's good that Lasse had another mirror.
      - asveikau 3y ago
        Woops, too late to edit this comment and say *investigation
  - delfinom 3y ago
    Honestly, he should call it quits and just drop xz utils and move on with life. He maintained it for 15 years and struggled to get anyone else to help until Jia showed up. Meanwhile the Linux ecosystem depended on it. The Linux ecosystem will either figure shit out and maintain it or move into a different archive library.

TLLtchvL8KZ 3y ago

I worry about his home/personal system, this guy seems to have befriended Lasse in order to get the position, is it possible Lasse himself has been compromised? I'd be nuking everything, possibly even disposing of hardware and setting up a new verifiable online identity on a clean system/hardware.