HENTAI CAN JOG 🍆🥫🏃
NINJA HATE COG 🥷😡⚙️
A JOINT CHANGE 🚬🔄
HANG IT CEO JAN 🕴️
GAIN JET NACHO ✈️🥙➕
GOAT-CHIN JANE 🧔♀️
GONNA CITE HAJ 🎙️🦈❞
ANCIENT HAG JO 🧙🏻♀️
ENJOING A CHAT 😄💬
Former maintainer of the .xz project for about a year or two. Hid a backdoor into the code that almost made it into many bigger distros if it wasn't found by a Microsoft employee.
More specifically, it's the name used by the attacker. Could well be multiple people, or if it's one person (still almost certainly state-funded, but the state can fund one person), a fake name nevertheless. We have no info about this person's real life identity. They used a VPN in Singapore, and some people have looked at the times of the commits to try guess a timezone, though that's not foolproof as they could've just been a nocturnal person, or even tried to schedule commits to happen at a time to suggest they're in a different timezone, though I think the latter is unlikely and overkill.
JIA CHEONG TAN
TEACHING JOAN
HENTAI CAN JOG 🍆🥫🏃
NINJA HATE COG 🥷😡⚙️
A JOINT CHANGE 🚬🔄
HANG IT CEO JAN 🕴️
GAIN JET NACHO ✈️🥙➕
GOAT-CHIN JANE 🧔♀️
GONNA CITE HAJ 🎙️🦈❞
ANCIENT HAG JO 🧙🏻♀️
ENJOING A CHAT 😄💬
Wait a minute:
CIA AGENT JOHN
I TAG JOHN CENA
The real answer is right in front of us all along. He played us all for fools.
Former maintainer of the .xz project for about a year or two. Hid a backdoor into the code that almost made it into many bigger distros if it wasn't found by a Microsoft employee.
More specifically, it's the name used by the attacker. Could well be multiple people, or if it's one person (still almost certainly state-funded, but the state can fund one person), a fake name nevertheless. We have no info about this person's real life identity. They used a VPN in Singapore, and some people have looked at the times of the commits to try guess a timezone, though that's not foolproof as they could've just been a nocturnal person, or even tried to schedule commits to happen at a time to suggest they're in a different timezone, though I think the latter is unlikely and overkill.
Yep seems like a bigger organisation being involved considering fact that this was brewing 2+ years.
i think it's the person that snuck in the xz vulnerability
If you used an even number of /s does that make your comment sincere?
Complaining about Reddit content on Lemmy, how creative.
The Internet is just screenshots of social media on other social media.
No posts can escape The Reddit Police.