How to pronounce “jia” in English

Jia wants his code in RHEL, but RHEL only has a new major release about once every three years.

- Jia has to act fast.

Jia's end goal is to compromise a very specific part of the SSH connection process, the RSA authentication step.

Jia uses an IFUNC resolver to set the audit hook early.

Jia has succeeded.

Jia Jiang is the author of "Rejection Proof.

Jia identifies and ranks four colors: Yellow, red, black, and white.

Jiang Zemin's contribution is known as The Three Represents.

Jiahu's a really interesting site.

But Jia is not who he appears to be.

Now Jia can find where the hook lives in memory and finally plant his code.

With Jia's exploit in place, SSH isn't just checking for a legitimate login anymore.

And Jia is careful, he doesn't want anyone else stumbling onto the backdoor, so that master key isn't just a simple password.

But Jia can't just go and fix that, that would completely expose the backdoor.

And Jia is here to talk about it and what he does for it on a daily basis.

- This is why Jia Tan wants a way into OpenSSH, but trying to hack it directly would be almost impossible.

Lucky for Jia, the open source model doesn't just mean that operating systems are stitched together from many programs, but that each of those programs is itself stitched together

- All indications are that Jia is a great contributor, and this puts Rich at ease, so he lets his guard down.

But for Jia, this is the perfect place to hide his payload, inside something that at first glance looks harmless.

That means that if Jia waits too long, the RSA Decrypt entry is frozen.

But crucially for Jia, there are no real guardrails.

So when Jia is first looking for the audit hook variable that he's supposed to rewrite, it's actually hidden from him, so he first has to find it.

But just as Jia is completing his backdoor, an open source developer requests to remove the dependency that links XZ to OpenSSH.

- So we downloaded Jia Tan's version of XZ, which was available on Fedora publicly, but we made a slight modification.

Instead of using Jia's secret code, we're using our own, and that means that we can take advantage of Jia's backdoor.

And what Jia has done is really mastered this as an art form, I would say.

I met Jia last summer at the World Domination Summit.

And so Jia was one of our keynote speakers who got a standing ovation.

Mong Chen Jiang from the BBC World Services Global China unit told us more about the film.

His name is Cui Jian.

It was when Jian Yang opened the door and he's like, "This is Pied Piper." Like, that was the two lines that kind of started it.

That's a very Jian Yang moment, in a way.

in China called Jiahu.

And this is the genius of Jia's trap.

This would spell disaster for Jia Tan.

Valgrind is raising hell on Jia's code.

I'm really excited to bring Jia Jiang here from Austin, Texas.

I like I think the Yang Jiang brand that you can get on Amazon.

So it was known that Jiang Zemin would transfer power to Hu Jintao.

I had a really vigorous disagreement with Jiang Zemin-- who was president, at the end of the '90s-- over Tibet, because I kept saying,

Here's a slide that Jiang used in his talk.

For months, Jia has been taking some of the load off Lasse.

So, Jia starts by making small changes.

So to hijack authentication, Jia can overwrite the GOT entry that tells SSH where it is.

And it's then that Rich gets his first message from Jia.

- Eventually, Jia gets what he wants.

Now, lucky for Jia, all this isn't immediately obvious.

I'm super-excited to introduce our speaker today Jia Jiang.

So I am a mayor of the city of Nanjing in Jiangsu province.