3 ms·
Completely conclusive proof? No, but it seems unlikely that there ever would be conclusive proof of such. They don't seem to exist outside of this incident an
by nebulous1 3y ago
Completely conclusive proof? No, but it seems unlikely that there ever would be conclusive proof of such.
They don't seem to exist outside of this incident and things related to this.
There were multiple people who also don't seem to exist outside of their posts to the xz mailing list applying pressure for the original maintainer to bring Jia on board. This occurred around the time that Jia was first making contact with the project, not only recently.
Apparently the IP addresses that were logged for Jia is a VPN based in Singapore
They have vanished.
Honestly, there's very little evidence that they weren't always intending this.
- doakes 3y agoWhat's your source for the IP addresses?
- orkj 3y agoIt's mentioned in one of the first references in this article: https://boehs.org/node/everything-i-know-about-the-xz-backdoor https://boehs.org/node/everything-i-know-about-the-xz-backdo... IRC activity
- nebulous1 3y agoI can't remember where I read that but it would likely have been from a HN link or possibly a comment. I just found this: https://news.ycombinator.com/item?id=39868773 https://news.ycombinator.com/item?id=39868773 which is definitely not where I originally read it, but libera is probably ultimately the source