Is anyone able to track Jia Tan’s (xz backdoor person) real identity? This guy is a menace to society.
@nixCraft It's also possible that their account was compromised somehow. At least I hope so, because otherwise, it's a very elaborate attack, gaining trust over 2 years... would make me wary of other projects as well.
@nixCraft Honestly, it's probably not one single guy, it's likely an identity used by a team.
@nixCraft I did a quick shallow search and most of the hits for that name was for a female Chinese professor of cultural stuff, but I doubt, obvs, its the same person as the GitHub JiaT75 user
@nixCraft given the complexity and time span I immediately assumed one of those state aponsored groups.
@nixCraft I suspect the intelligence agencies are already on it. That said, I'm also sure that some of the open source intelligence folks on mastodon may like the challenge. #opensourceintelligence
@nixCraft
Sounds like a thing @briankrebs would be already doing
@nixCraft it's impossible if it's a persona, the user will Just disappear. If not, there's a chance.

Update: I am an idiot and the acc was a joke sorry

@nixCraft I mean the person *might* currently be in a hackclub slack huddle doing an AMA and be a teenager although the slack person might be frauding a fraud

@nixCraft You should more carefully consider what you post here. What good does it make to encourage internet mob to a witch hunt? You are way more likely to ruin some random persons day (or worse) than to get the right person. And even if you get the right person, then what?