this post was submitted on 31 Mar 2024
587 points (97.6% liked)
Open Source
31258 readers
177 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
- !libre_culture@lemmy.ml
- !libre_software@lemmy.ml
- !libre_hardware@lemmy.ml
- !linux@lemmy.ml
- !technology@lemmy.ml
Community icon from opensource.org, but we are not affiliated with them.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Via https://boehs.org/node/everything-i-know-about-the-xz-backdoor
Wild, so it would suggest that the actor wasn't Chinese at all. An authentic Chinese person probably wouldn't choose a name that sounded like that, any more than I would name myself Sean MacBerkowitz, it would just sound wrong.
A random name generator might produce something like this, of course, if it wasn't programmed to be too picky.
Or they are Chinese, and pick non-authentic Chinese names so people wouldn't suspect them? I don't think looking at the name can be a great way to identify the source.
This attack is clearly sophisticate: the attacker(s) are probably well-trained in obscuring their identity to not reveal much info from their name picks. Say, just use a random name generator.
Except it is a Chinese name, as Cantonese is spoken in China. Lots of speculation here by people missing vital information.
The name is suspicious because "Jia Cheong Tan" uses two different romanization of Chinese used in different regions. "Jia" and "Tan" seems to be pinyin, which is commonly used in the mainland; yet "cheong" uses probably Wade-Giles which is used in Taiwan.
OP seems to suggest cheong is Jyuping, which is used as a romanization for cantonese, but according to wikipedia, "eong" is not a final for Jyuping. So I don't think this is Jyuping.
disclaimer: I don't know a lot about Jyuping or Wade-Giles, so everything I put out is from wikipedia.
See: