News for hackers. Stuff that matters.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by buildbot on Friday March 29, 2024 @01:44PM (#39866902)
> tukaani.org has address 5.44.245.25 (seemingly in Finland)

Hetzner?

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by TimWolla on Friday March 29, 2024 @02:06PM (#39867141)
No:

    route:          5.44.240.0/21
    descr:          Zoner Oy
    origin:         AS201692
    mnt-by:         MNT-ZONER
    created:        2014-09-03T08:09:00Z
    last-modified:  2014-09-03T08:09:00Z
    source:         RIPE
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by whizzter on Friday March 29, 2024 @02:29PM (#39867407)
It's Finnish, Oy is short for "Osake Yhtiö" (share-association, basically a LLC), seems to be registered/hosted at https://www.zoner.fi/
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by jaakl on Sunday March 31, 2024 @04:13AM (#39882415)
So probably Suojelupoliisi, Finnish Security and Intelligence Service is behind all this
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by buildbot on Friday March 29, 2024 @02:09PM (#39867174)
Interesting, seems to be a tiny finnish hosting company: https://www.zoner.fi/english/
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ancientMariner on Sunday March 31, 2024 @06:14AM (#39882942)
Zoner is a Finnish web hosting company, which has a history of providing hosting for Finnish open source projects, and the original maintainer (and most of the original crew) is Finnish as well. Nothing weird here.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by yencabulator on Friday March 29, 2024 @03:11PM (#39867825)
For what it's worth, tukaani is how you spell toucan (the bird) in Finnish, and Lasse is a common Finnish name; the site being previously hosted in Finland is very plausible.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Stagnant on Friday March 29, 2024 @03:56PM (#39868332)
Yeah according to their website[0] it looks like majority of the past contributors were Finnish so nothing odd about the hosting provider. On the same page it says that Jia Tan became co-maintainer of xz in 2022.

0: https://tukaani.org/about.html