Lunduke
News • Science & Tech
Make Computers Fun Again - Linux, UNIX, Alternative Operating Systems, Computer History, and Retro Computing. Also dad jokes.
Interested? Want to learn more about the community?
April 02, 2024

xz backdoor

I did a more thorough analysis and I changed my mind again. :) Specifically, I compared "Jia Tan" with myself, with the work I was doing on my FOSH computer during 2015-2019, when I worked a 9-to-5 job and worked on my computer after work; and I found ourselves largely comparable.

First, the data. For "Jia Tan", I took all the commits he authored (the field "Author" has the string "jiat" ) and for which the "AuthorDate" has the timezone UTC+0800. So I threw away a number of commits credited to "Jia Tan" because they may have been interference from Lasse Collins who may have applied the patches from "Jia" on his own machine at some weird time. To prevent them from skewing the results, I just threw them all out. For myself, I took the repo with the code and threw away all commits that are from 2020 and later. At that time either there was no work done, or else I wasn't using Git, or else I wasn't employed in a 9-to-5 job. After I left the job and again started using Git, my commits are all over the place. Literally. Not tracking any kind of a day-night cycle. xD

I then used the time of making the commit (AuthorDate) in it's own timezone. This means I'm basically testing the plausibility of "Jia Tan" being in UTC+0800, but it also means that for myself I'm automatically taking into account the daylight savings changes. This is important because this way I'm doing a better job comparing the purpoted behavior of two developers in their own lives.

Next, I counted all the commits. "Jia Tan" made the vast majority of his commits during 2023, amounting to 444 commits total, with the majority in about the span of a year and four months. I on the other hand have about three years of work I looked at and in that time I made 744 commits. You could say "Jia Tan" made about 40% more commits per year than I did.

Next, the commits were separated into commits made on weekdays and commits made on weekends. "Weekend" was counted as starting on 5 PM on a Friday and ending on 24 PM on Sunday. The weekend thus amounted to 33% of total time.

In total, I made 342 commits during workdays, amounting to 46.6% of all commits. On the other hand, "Jia Tan" made 311 commits during workdays, amounting to 70% of commits.

Next, all the commits were further divided into buckets according to the hour during which they were made. A commit made, say, starting with 8:00 PM and before 9:00 PM was counted to the bucket "20" (for 20:00, 24-hour time). Commits made before 1 AM were counted into bucket "0", commits made starting with noon and before "1 PM" were counted into bucket "12" and so on. The time "24 PM" didn't exist and was treated as "0 AM". I was actually using the 24-hour day throughout and I'm only coverting to 12-hour day for the purposes of writing this post. :)

Finally, every bucket was converted from a raw number of commits into the percentage of all commits from the developer that were made in that bucket. So a bucket "weekend, 20" now holds a percent instead of the actual number of commits. Percentage is, again, calculated as number of commits in the bucket divided by all the commits made by the developer.

I also made two separate "dot plots" which show in 2D both the day the commit was made and the moment of day the commit was made. The dot plots also differentiate between weekends and workdays. Workdays are red plusses and weekends are green x-es.

The graphs are below. First the graph of buckets then the two dot plots, first mine then "Jia Tan". The graph of buckets has been rotated to start with 6 AM so that it would be easier to view the events happening around the midnight, and how midnight doesn't itself change anything, really. :) Also, nobody had a single commit in the "6" bucket on either workdays or weekends.

As for the analysis, the difference between us is the fact "Jia Tan" has a large spike for work done between 8 PM and 9 PM, but otherwise we are mostly in line. You can see "Jia Tan" is probably one of those insufferable morning persons because on weekends he likes to commit during 10-12 AM. Some people... I on the other hand am displaying sensiblity in using weekends and I have a bump in the early afternoon, when you would expect to do some hacking. :) "Jia Tan" also has a bump in the "16" bucket, which might be explained with the notion he was working from 8 AM to 4 PM as a developer of some sort (remotely?) and then after finishing his dayjob he would do some FOSS maintenance, commit, go home, rest a little, and start working again around 8 PM. For the record, my work time was generally from 9 AM to 5 PM, a literal 9-to-5. :) I could also start working earlier, up to 8 AM, if I wanted to, and I would be expected to stay for 8 hours and then I'd be off. But I usually came to work at the last moment. :)

As for the reason why I usually came at the last moment, just look at the tail of the graph and you'll know. :) I don't remember I drove myself this hard. I thought I would be in bed by 1 AM, but apparently, actual records tell me I'd commonly stay up until 3 AM and then wake up after 8 AM. 6 hours sleep for the win! Don't do this kids, it wrecks your health. :)

Compared to me, "Jia Tan" is more sensible, not having any commits in the "workday, 3" bucket.

For my money, it seems as if "Jia Tan" wasn't doing this xz backdoor thing for a living, but as an afterwork hustle. He has plenty of commits in "workday, 16" and if you suppose those were made as part of an office job, he would presumably not have any commits after 8 hours of work. Yet 16+8=24, and he has plenty of commits in buckets 0 and 1 (which would imply a 10-hour workday). If you move his work hours forward by 1, then you get rid of bucket 0, but now have to deal with buckets 16 and 1. In addition, he made plenty of commits during the weekend. That is, realistically, unfeasible for an employee.

Share this post widely, if you please.

Interested? Want to learn more about the community?
What else you may like…
Videos
Podcasts
Posts
Articles
Lunduke's Week in Tech - Aug 23, 2025

USA Owns Intel & Microsoft's Intifada Problem (Plus: UK Says Email Causes Drought)

The Article:
https://lunduke.substack.com/p/lundukes-week-in-tech-aug-23-2025

More from The Lunduke Journal:
https://lunduke.com/

00:39:03
Microsoft "Intifada" Shut Down After 4 Hours

Note: This video is being made free for all due to the nature of the news story. While all Audio Podcasts and Articles from The Lunduke Journal are always free, many videos are exclusive for subscribers. More details, and links, at Lunduke.com.

After the "Worker Intifada" declared they would occupy Microsoft Campus "as long as it takes" for Microsoft to cut ties with "the murderous Zionists", the event barely lasted past lunch.

The Article:
https://lunduke.substack.com/p/worker-intifada-occupies-microsoft

More from The Lunduke Journal:
https://lunduke.com/

00:34:11
Lunduke's Week in Tech - August 15th, 2025

Linux Kernel Chaos & The Non-Woke Software List

The Article: https://lunduke.substack.com/p/lundukes-week-in-tech-aug-15-2026

More from The Lunduke Journal:
https://lunduke.com/

00:45:49
November 22, 2023
The futility of Ad-Blockers

Ads are filling the entirety of the Web -- websites, podcasts, YouTube videos, etc. -- at an increasing rate. Prices for those ad placements are plummeting. Consumers are desperate to use ad-blockers to make the web palatable. Google (and others) are desperate to break and block ad-blockers. All of which results in... more ads and lower pay for creators.

It's a fascinatingly annoying cycle. And there's only one viable way out of it.

Looking for the Podcast RSS feed or other links? Check here:
https://lunduke.locals.com/post/4619051/lunduke-journal-link-central-tm

Give the gift of The Lunduke Journal:
https://lunduke.locals.com/post/4898317/give-the-gift-of-the-lunduke-journal

The futility of Ad-Blockers
November 21, 2023
openSUSE says "No Lunduke allowed!"

Those in power with openSUSE make it clear they will not allow me anywhere near anything related to the openSUSE project. Ever. For any reason.

Well, that settles that, then! Guess I won't be contributing to openSUSE! 🤣

Looking for the Podcast RSS feed or other links?
https://lunduke.locals.com/post/4619051/lunduke-journal-link-central-tm

Give the gift of The Lunduke Journal:
https://lunduke.locals.com/post/4898317/give-the-gift-of-the-lunduke-journal

openSUSE says "No Lunduke allowed!"
September 13, 2023
"Andreas Kling creator of Serenity OS & Ladybird Web Browser" - Lunduke’s Big Tech Show - September 13th, 2023 - Ep 044

This episode is free for all to enjoy and share.

Be sure to subscribe here at Lunduke.Locals.com to get all shows & articles (including interviews with other amazing nerds).

"Andreas Kling creator of Serenity OS & Ladybird Web Browser" - Lunduke’s Big Tech Show - September 13th, 2023 - Ep 044
post photo preview

“Selectramatronics”.

(By the way - minor spoiler for the ending - is there anything more eerie and yet oddly calming than the British shipping forecast?)

How many people are running Omarchy here? If not I am curious if you are interested in it?

For me Omarchy is the most polished and well made Linux distro I have ever used. I am VERY happy with it and love that it is coming from someone very based who is against all of the woke garbage going on in the open source world.

post photo preview
post photo preview
Ladybird Gains Google Sheets Support
Ladybird dev says: “Been told many times over the years that ‘you’ll never get complex stuff like Google Docs running’ lmao.”

The Ladybird web browser can now handle Google Sheets.

 

Watching as Ladybird rapidly gains support for increasingly complex websites (and web “apps”) is a truly marvelous thing.

As the lead developer of Ladybird says, it’s not perfect. But increasingly usable.

I mean, heck. Look at that. That’s Google Sheets. Running in a web browser that is not based on Firefox or Chrome.

 

The real question, for many of us, is “how long until we can use Ladybird as our daily web browser?”

According to the team, “Summer of 2026” is their target for the first official “Alpha” release. And my guess is… they’re probably about right. But, based on the rapid progress, I’d say it’s also reasonable to assume that super-duper-early adopters can probably start daily test driving Ladybird a bit sooner than that.

It seems like we are seeing significant new functionality, and site support, almost every day. Here’s Cal.com running in Ladybird.

 

And here one of the developers is showing off gamepad support. Which. Awesome.

 

Let this be your regular reminder: Anybody who is telling you “you can’t build [insert project here], it’s too hard and requires a massive team”… is full of doggy doo-doo.

Read full Article
post photo preview
Microsoft "Worker Intifada" says "Go Away, Jews!"
On the 3rd day of escalating events, the "Intifada" of Microsoft employees takes over a Redmond transit center, celebrates the murder of Jews, and chants (in Arabic), "Go Away, Jews!"

On Thursday, August 21st, the Microsoft “Worker Intifada” held their third event of the week — continuing their demands that Microsoft cut all ties with Israel, Israelis, and any company that does business in Israel.

This time, they ratcheted things up to officially include specific calls against all Jews.

Image
 

This third event of the week — following events on the 19th and 20th, which resulted in 18 arrests after the “Intifada” vandalized property, stole from a farmers market, and became aggressive — was scheduled at the transit station (and park & ride) next to Microsoft headquarters.

And scheduled to coincide with the evening rush hour.

Image
 

While some members of the “Intifada” had, at the previous events, shouted vulgarities and anti-Jewish statements (specifically anti-Jewish, not simply “anti-Israel”) at those walking by, this most recent event escalated the anti-Jewish messaging significantly.

With the entire crowd taking part in a chant — in Arabic — of “Jews, get out” or “Go away, Jews!”

 

The Microsoft “Intifada” event also made use of the “bloody red hand” symbolism — which specifically is celebrating the lynching of two Jews in 2000.

In that 2000 event, a Palestinian lynch mob gouged out eyes and disemboweled the Jews — with one Gazan holding up his hands, covered in the blood of the dead Jews, celebrating their murder.

Intifada Bloody hand pic
 

You can see the “bloody red hand” in this image, taken during the “Worker Intifada” event, next to the Microsoft logo — along with the statements “Microsoft powers genocide” and “Microsoft kills kids”.

 

The “Worker Intifada” has promised to escalate activities — including more violence and increasing speech “which cannot be ignored”.

 

Red paint (symbolizing blood) on Microsoft signs, fake “dead bodies”, screaming specifically anti-Jewish statements at people walking by, and getting aggressive with police.

And now the “Intifada” is adopting of imagery glorifying and encouraging the disemboweling of Jewish people — combined with loud, repeated, angry chants of “Jews get out!” — certainly seems like an escalation.

Importantly, this has quickly become not simply a political demonstration. These “Intifada” members are openly, proudly, and loudly advocating for the murder of their Jewish co-workers.

The Lunduke Journal reached out to the organizers of the Microsoft “Worker Intifada”, however they promptly stopped responding — and refused to answer any questions — once they noticed noticed the name of this publication.

The Lunduke Journal has also reached out to Microsoft for comment. As yet there has been no response.


The Lunduke Journal is the last bastion of truly independent Tech Journalism. Ad Free, Big Tech Free, Non-Woke, Audience Supported. Consider becoming a subscriber to support this vital work.

Read full Article
post photo preview
USA Now Owns 10% of Intel
The US Government is now the largest shareholder of Intel, the maker of CPUs with a secret, back-door operating system. What could possibly go wrong?

Yesterday, President Donald Trump announced that the United Stated federal government had acquired a 10% stake in Intel — making the USA the single largest shareholder.

Which raises a question: Considering the fact that Intel has implemented a secret operating system within their CPUs — a system which has total control and visibility of everything a computer does, and which computer users are not allowed access to — what are the implications of Intel now being owned, in large part, by a government?

How The Intel Deal Happened

On August 22nd, President Trump made a Truth Social post which read, “It is my Great Honor to report that the United States of America now fully owns and controls 10% of INTEL.”

Image
 

What’s especially fascinating is that, according to the President, “The United States paid nothing for these shares” worth approximately $11 Billion USD.

How, exactly did this all come to pass?

Well, the current CEO of Intel — a man named Lip-Bu Tan — is also the Chairman of an investment firm called Walden International. A position he continued to hold after becoming the new head of Intel.

Back on July 18th, the US Congress Select Committee on the Chinese Communist Party wrote a letter expressing concern regarding Walden International’s investments in Chinese Communist Party tied corporations.

Image
 

But Intel CEO’s ties to China didn’t end there.

Lip-Bu Tan was also, previously, the CEO of Cadence Design Systems, which plead guilty to illegally selling chip design software and hardware to the Chinese Military.

Image
 

President Trump chimed in, on August 7th, stating that “The CEO of Intel is highly CONFLICTED and must resign immediately. There is no other solution to this problem.”

Image
 

Lip-Bu Tan sent out a letter to Intel employees, later that same day, addressing some of this — calling it “misinformation”, without providing any specifics or detailed rebuttals. He also referred to his leadership of “Walden” as a “past role”, even though his ties to Walden appear to remain.

4 days later, on August 11th, the Intel CEO met, in person, with President Trump. According to President Trump, during the meeting Trump suggested that Intel should “give” the US government 10% of Intel. And the Intel CEO replied that he would think about it.

On August 22nd, the deal was announced that it had been finalized.

Now there are, obviously, going to be many opinions about this. I have more than a few, myself. Let’s put aside some of the more political and financial concerns, for a moment, and focus in on a security & privacy issue.

The Intel Management Engine Issue

Almost every major Intel CPU, produced since 2008, ships with something called the “Intel Management Engine” (or “IME”, for short).

The IME is, to put it simply, a hidden computer inside your CPU. A hidden computer which has access to everything on your computer (absolutely everything) — but which you are not allowed any access to yourself.

A hidden computer… which even has a full web server.

Now, ask yourself, why would a secret computer — hidden inside your computer, spying on everything you do — need a web server? The answer is not a comforting one.

The IME is one of the most powerful, non-auditable, and widespread backdoors ever created. And it is in just about every Intel-powered computer on Earth. Even Google is concerned about the IME — going to drastic measures to disable it on their servers whenever possible.

And now the US federal government is the single largest shareholder of Intel.

The way I see it, the results of government ownership of Intel could impact the Intel Management Engine in one of two ways:

  • The Good: The government could provide oversight into potential, or already existing, abuses of the IME which may be impacting the security and privacy of US citizens, government agencies, and corporations. The government could even force Intel to remove the IME entirely. A massive win for computer security and privacy.

  • The Bad: The government could take advantage (or further advantage) of the IME for their own purposes. Possibly even expanding the IME’s already extensive surveillance capabilities.

Now, I don’t know about you, but my gut tells me the bad option is far more likely than the good one.

Even if that is not the intention of President Trump in making this deal… Someone, somewhere within the federal government is already planning ways which the IME can be used (or used further), in ways which we, as citizens, will not like.

But, and this is important, the US government is not the only organization with control over Intel.

The Other Big Players

While this 10% stake makes the USA the single largest shareholder of Intel, both Blackrock and Vanguard come in at a close second (both with close to 9% of the shares).

 

In fact, the top 4 shareholders of Intel now have a combined ownership of roughly 1/3rd of the entire company — that’s a lot of control.

Plus, most of those investment firms holding significant portions of several other computer companies. BlackRock, for example, also owns massive, influential stakes in Microsoft, Apple, Nvidia, Amazon, and Google.

 

The control which these firms can wield over the computer industry is absolutely staggering.

Now that the US federal government is an even larger shareholder — at least with Intel — it will be interesting to see what impact that has on both the existing investment firms… and the actions of the corporations themselves.

Read full Article
See More
Available on mobile and TV devices
google store google store app store app store
google store google store app tv store app tv store amazon store amazon store roku store roku store
Powered by Locals