Comment by dolmen

Another analysis locates Jia in Eastern Europe: https://rheaeve.substack.com/p/xz-backdoor-times-damned-time...

But I would like to see analysis of timestamp of GitHub events (like PRs and comments timestamps) which are harder to fake.