Skip to content

Comment on XZ: Repo maintainer Lasse Collin responding on LKML

Comments

Doesn't give much more information except that he wasn't immediately picked up by LEO.

Poor guy will go through more stress now even more than that created and imposed on him over 2 years by the attacker.

If anything we should encourage him to look back at his mental health as not being his fault and that we need to protect ourselves.

he wasn't immediately picked up by LEO.

For what?

Questioning?

Some people are trying to push a conspiracy theory that the maintainer and the contributor are the same person.

No, I was going for questioning and help with their investigations.

Seems like something serious and illegal happened. Possibly to do with a hostile state. Where I live, there would be at least 2 different organisations that would be very interested to find out what happened as quickly as possible. I don't for one second think he was involved but he would be essential in any investigation.

Where I live, there would be at least 2 different organisations that would be very interested to find out what happened as quickly as possible.

What makes you that confident they would? What if Jia actually works for them?

In whose jurisdiction?

I am not sure, but I'd expect the FBI's cyber crime division.

If you look at the list of (former) contributors of Tukaani, you will notice that an overwhelming majority of the names are Finnish, Lasse included, though he could also pass for Swedish. So FBI is going to investigate Github at most, unless Lasse has suddenly moved to the US or FBI has invaded Finland in some capacity.

https://tukaani.org/about.html

All meaningful new information will probably come from identifying Jia Tan, if that ever happens. I haven't done much reading yet, but it seems to me there was no connection between him and Lasse outside the Github project.

What jurisdiction does the fbi have in Sweden?

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.