Received-SPF: pass (google.com: domain of oss-security-return-30023-linux.lists.archive=gmail.com@lists.openwall.com designates 193.110.157.125 as permitted sender) client-ip=193.110.157.125;
Mailing-List: contact oss-security-help@lists.openwall.com; run by ezmlm
Precedence: bulk
Reply-To: oss-security@lists.openwall.com
Message-ID: <6619D09B.60202@gmail.com>
Date: Fri, 12 Apr 2024 19:23:55 -0500
From: Jacob Bachmeyer <jcb62281@gmail.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.22) Gecko/20090807 MultiZilla/1.8.3.4e SeaMonkey/1.1.17 Mnenhy/0.7.6.0
MIME-Version: 1.0
To: Alejandro Colomar <alx@kernel.org>
CC: oss-security@lists.openwall.com, Sam James <sam@gentoo.org>, 
 Joey Hess <id@joeyh.name>,
 Jonathan Nieder <jrnieder@gmail.com>, Andres Freund <andres@anarazel.de>, 
 Lasse Collin <lasse.collin@tukaani.org>,
 xz@tukaani.org
References: <ZhYEpAFolwefRv7X@debian> <20240410162812.GA17059@openwall.com> <66175855.2090805@gmail.com> <Zhgc_fyeFqnTc__t@debian> <6618AB04.5030707@gmail.com> <ZhkphiAdOcI-WWx4@debian>
In-Reply-To: <ZhkphiAdOcI-WWx4@debian>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [oss-security] Analysis on who is Jia Tan, and who he could work
 for, reading xz.git

Alejandro Colomar wrote:
> Hi Jacob,
>
> Thanks to your script, I've found a mistake in my analysis of the
> timestamps.
>   

Interesting.  I am very happy to have helped clear the air.

> The commit dates in +0200 recently seem to be because Jia Tan rebased
> some commits from Lasse, and used --committer-date-is-author-date.
>
> 	commit 3007e74ef250f0ce95d97ffbdf2282284f93764d
> 	Author:     Lasse Collin <lasse.collin@tukaani.org>
> 	AuthorDate: Tue Mar 5 23:21:26 2024 +0200
> 	Commit:     Lasse Collin <lasse.collin@tukaani.org>
> 	CommitDate: Tue Mar 5 23:23:16 2024 +0200
>
> 	commit 6e97b299f1b22e366ec42ba5dc5b9d0746e87b84
> 	Author:     Lasse Collin <lasse.collin@tukaani.org>
> 	AuthorDate: Tue Mar 5 23:21:26 2024 +0200
> 	Commit:     Jia Tan <jiat0218@gmail.com>
> 	CommitDate: Tue Mar 5 23:21:26 2024 +0200
>
> $ git describe --all --contains 3007e74ef250f0ce95d97ffbdf2282284f93764d
> master~37
> $ git describe --all --contains 6e97b299f1b22e366ec42ba5dc5b9d0746e87b84
> tags/v5.6.1~9
>
> The other three commits have a similar story.  So it was a red herring.
> Then, all of Jia's actions have consistently been in +0800.
>   

Very interesting---that red herring has gotten quite a bit of press.

> Now I'm using your scripts to collect data from several projects where I
> work, to compare with data points that I know well.

Excellent!  Now we are likely to get somewhere.


-- Jacob