Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by TimWolla on Friday March 29, 2024 @02:06PM
(#39867141)
No:
route: 5.44.240.0/21
descr: Zoner Oy
origin: AS201692
mnt-by: MNT-ZONER
created: 2014-09-03T08:09:00Z
last-modified: 2014-09-03T08:09:00Z
source: RIPE
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by whizzter on Friday March 29, 2024 @02:29PM
(#39867407)
It's Finnish, Oy is short for "Osake Yhtiö" (share-association, basically a LLC), seems to be registered/hosted at https://www.zoner.fi/
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by jaakl on Sunday March 31, 2024 @04:13AM
(#39882415)
So probably Suojelupoliisi, Finnish Security and Intelligence Service is behind all this
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by buildbot on Friday March 29, 2024 @02:09PM
(#39867174)
Interesting, seems to be a tiny finnish hosting company: https://www.zoner.fi/english/
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by ancientMariner on Sunday March 31, 2024 @06:14AM
(#39882942)
Zoner is a Finnish web hosting company, which has a history of providing hosting for Finnish open source projects, and the original maintainer (and most of the original crew) is Finnish as well. Nothing weird here.
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by yencabulator on Friday March 29, 2024 @03:11PM
(#39867825)
For what it's worth, tukaani is how you spell toucan (the bird) in Finnish, and Lasse is a common Finnish name; the site being previously hosted in Finland is very plausible.
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by Stagnant on Friday March 29, 2024 @03:56PM
(#39868332)
Yeah according to their website[0] it looks like majority of the past contributors were Finnish so nothing odd about the hosting provider. On the same page it says that Jia Tan became co-maintainer of xz in 2022.
Hetzner?