Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 12 Apr 2024 19:23:55 -0500
From: Jacob Bachmeyer <jcb62281@...il.com>
To: Alejandro Colomar <alx@...nel.org>
CC: oss-security@...ts.openwall.com, Sam James <sam@...too.org>, 
 Joey Hess <id@...yh.name>,
 Jonathan Nieder <jrnieder@...il.com>, Andres Freund <andres@...razel.de>, 
 Lasse Collin <lasse.collin@...aani.org>,
 xz@...aani.org
Subject: Re: Analysis on who is Jia Tan, and who he could work
 for, reading xz.git

Alejandro Colomar wrote:
> Hi Jacob,
>
> Thanks to your script, I've found a mistake in my analysis of the
> timestamps.
>   

Interesting.  I am very happy to have helped clear the air.

> The commit dates in +0200 recently seem to be because Jia Tan rebased
> some commits from Lasse, and used --committer-date-is-author-date.
>
> 	commit 3007e74ef250f0ce95d97ffbdf2282284f93764d
> 	Author:     Lasse Collin <lasse.collin@...aani.org>
> 	AuthorDate: Tue Mar 5 23:21:26 2024 +0200
> 	Commit:     Lasse Collin <lasse.collin@...aani.org>
> 	CommitDate: Tue Mar 5 23:23:16 2024 +0200
>
> 	commit 6e97b299f1b22e366ec42ba5dc5b9d0746e87b84
> 	Author:     Lasse Collin <lasse.collin@...aani.org>
> 	AuthorDate: Tue Mar 5 23:21:26 2024 +0200
> 	Commit:     Jia Tan <jiat0218@...il.com>
> 	CommitDate: Tue Mar 5 23:21:26 2024 +0200
>
> $ git describe --all --contains 3007e74ef250f0ce95d97ffbdf2282284f93764d
> master~37
> $ git describe --all --contains 6e97b299f1b22e366ec42ba5dc5b9d0746e87b84
> tags/v5.6.1~9
>
> The other three commits have a similar story.  So it was a red herring.
> Then, all of Jia's actions have consistently been in +0800.
>   

Very interesting---that red herring has gotten quite a bit of press.

> Now I'm using your scripts to collect data from several projects where I
> work, to compare with data points that I know well.

Excellent!  Now we are likely to get somewhere.


-- Jacob

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.