UPDATE: Our hero Jake Davis provided some interesting commentary on this subject recently:
I remember seeing IRC logs of you and LulzSec dissing The Jester and saying his tool “XerXeS” is just SlowLoris with Tor… but how did you guys come to this conclusion? How can this be mitigated if his attacks appear to come from so many exit nodes? Just block all Tor exit nodes? I dnt wanna to. :(“I have no idea how XerXeS or any other DDoS tool actually works, all I know is that the person or people running the character known as The Jester have been doing it successfully for many years with absolutely zero discrepancies, arrests or suspensions. I think that’s it’s incredibly impressive that The Jester has stuck to the courage of his/her/their convictions for such a large period of time, even though I disagree with some of the political views expressed. I’m a big fan of facilitating alternative realities and The Jester brings us into another world with many sophisticated layers that often make us forget that it’s just a twitter account and a blog, which is a talent few people have. I find the construction of the persona at a granular level far more admirable than the hacking itself, which I obviously don’t approve of. ”   -via http://ask.fm/DoubleJake
>DecryptedMatrix gives voice to PiraX
Hello there, th3j35t3r. We would also like to welcome our fellow Anons, bloggers, and those simply interested in a cyber-culture controversy spanning over two years. We are sure you know why we have called you here. Your recent online behavior has been rather strange, to say the least. We are here for one reason: We want to end you.
We would like to start first by making you comfortable. No more quasi-anonymous pseudonym mumbo-jumbo. Your name is Thomas so we will call you by the name you were given by your mother. We know your name because it was confirmed over a month ago with the following Pastebin paste:Â Â http://pastebin.com/A5iiTAJSÂ (PiraX Dox continued after paste)
________________________________________________________________________
Q: Are Thomas Ryan and th3j35t3r one and the same person?
tl;dr: Yes. You fucking bet they are. In the words of Oscar Wilde, however, âThe truth is rarely pure and never simple.â Thus, if you want the full, uncensored dox on th3j35t3r, youâre going to have to bear with me for the next ten minutes as I tear apart his tissue of lies and disinformation.
Now concentrate, cos here comes the proof…
Warning: Long dox is looooooooong. I trust it will prove to be an enlightening read however, not least for Mr Thomas Ryan of 86 Amber Street, Staten Island NY.
SEE TOM RYAN AS JESTER at DEFCON 19
Filmed at Defcon after observing Tom Ryan post and photograph a note outside the vendor room signed “J.” This photo was tweeted from @th3j35t3r twitter within moments, as was the following: https://i.imgur.com/axth3.jpg
Note the “Black cell paintball” logo on the shirt. BCP is the name of Tom’s Paintball team. Tom hangs on PBnation.com with a kid called j35t3r, which is the likely source for the name, and the first of many plagiarisms. NOT SUSPICIOUS AT ALL, folks. Nor is it suspicious that the ridiculous attempts to smear me as a secret blackhat/anon/whatever over the last year all come from the same group of six people connected to Tom. The other partner is tentatively identified, but that’s a story for later.
**********
Among the 9,000 names to have been linked with @th3j35t3r, one that keeps cropping up is that of @TomRyanBlog. The dox has been denied by th3j35t3r, but then Sabu repeatedly denied that he was Hector Monsegur, and we all know how that one ended up…
While many Anons have been focused on reverse DNS lookups, port scanning and conventional doxing methods to unmask Jester, no one seems to have tried a simpler technique: writing analysis.
If Tom Ryan (TR) and Jester (J) are one and the same person, it should be easy to tell. Theyâve written 3,000 tweets between them. Even the l33t3st of the l33t would struggle to convincingly maintain two separate writing styles over the course of thousands of tweets and numerous blog posts.
For those who are new to the party, hereâs an overview of what we know about TR and J:
Both are conservative, right-wing and love their precious military. Both hate #OWS, Wikileaks, Manning and are obsessed with unmasking Anons. Both are fixated with Sabu (still!), Team Pois0n and Cabin Cr3w. Both enjoy love-ins with @AsherahResearch, @AnonymousDown and all the usual trolls. In short, theyâre both neo-con faggots. But are they one and the same faggot, or are they separate fags who happen to be pursuing identical vendettas?
Before we get bogged down in analyzing their writing styles, hereâs some lighter tit-bits to get things kick-started:
1. Last year, TR and J both attended Hacker Halted in Miami and DEFCON in Nevada. Based on what we know of the pairâs political leanings and infosec knowledge, that alone automatically narrows them down to less than 5,000 possible suspects.
2. TR and J both like sushi (a trifling detail, but one that helps build a picture of their personalities). TR: â@p0isAn0N not going to the right Pizzaria. If you are in Boston you should be going to BoLoCo for Burritos anyway. And Duozo for Sushi.â
J: â#hackerhalted delegates … Stay clear of Cafe Bastille. Great sushi at Bali Cafe though… Stayin frosty.â
3. Tom Ryan has form for assuming false identities â such as âRobin Sageâ. See here for the full story:
http://www.darkreading.com/insider-threat/167801100/security/privacy/225702468/index.html
INTERESTING FACT: @RobinSage joined Twitter on 26th December 2009 â exactly one week after @th3j35t3r joined.
The connection between Tom Ryan, Robin Sage and Jester was first brought to my attention by this tweet from @LulzKitten on 29th March 2012:
âOkay, let’s cut the crap, hello @Th3J35t3r aka@TomRyanBlog aka robinsage. Game over. Was fun, at least sometimes. Next nemesis, plox!â
(Note: Direct links to all tweets quoted in this dox can be found cited in the conclusion.) After reading LulzKittenâs tweet, I cast a casual glance over the Twitter feeds of Tom Ryan and Jester, and instantly noticed some similarities between the pair.
The most damning evidence linking TR and J â the smoking gun â will be presented towards the end of this dox, if you can wait that long, but first, letâs perform some writing analysis. After all, if TR and J are the same person, there ought to be some similarities in their writing styles, surely? You betcha. Here we go then:
Anyone whoâs followed J on Twitter and read his blog may have noticed that he has a very distinctive writing style. Letâs pick through some of Jesterâs trademark phrases, and then see if we can spot them recurring in TRâs tweets:
4. âHmmmmâ. Jester likes to say âHmmmâ âErrrâ and âAhemmmâ a lot. In fact he likes to say them so much that he even uses these filler phrases in his blog titles, as well as littering his tweets with them. Hereâs some examples:
5th April: â@deftpunkz – umm holy shit. I dont know what to say guys, errrr thanks, i think? -â
4th April: âAl-Qaida ‘blacked out’ on the internet (effectively switched off) >>>http://timesofindia.indiatimes.com/tech/news/internet/Al-Qaida-blacked-out-on-internet/articleshow/12529550.cms #infosec#saladin #ahemmâ
3rd April: âNow…… imagine…… how many of those listed in my last, were ummmmmm – on the ‘shit list’ – just a thought??? #anonymousâ
27th Feb: â#Wikileaks & #anonymous dump 5 million#strafor internal emails obtained by #anonymouslast Dec..umm this right here…â
21st March: âAnti-Anonymous hacker threatens to expose them (via MSNBC) http://www.msnbc.com/id/46716942<<< ummm too late. #military #cyber #security#infosec #DoDâ
15th Nov, WordPress blog title: âOccupy Wall Street?? 99%?? Ummm.â
Hmmm, I wonder if Tom Ryan also likes to say âHmmmâ? Letâs take a look:
10th April: âHow To Prevent Data Leaks From Happening To Your Organization http://zite.to/HCucc8hmmm…how do you prevent the carbon factor from leaking?â
6th April: âHmmm So @AnonW0rmer is arrested at 10:30http://j.mp/HiAASP tweets till 3:32, @ItsKahunadisappears @AnonymousIRC disappears for 4 Day >>>â
15th March: âCSI tonight has a scent of Anonymous. Anthropology professor teaching about Hactivism. Hmmm who came it be?â
11th March: â@kennethlipp hhhmmmm do you think any anons donated money to his reelection campaign?â
7th March: â@CryptKper @v0ld4m0rt you are spot on! Who could that have been? Hmmmmmâ
16th Feb: â@agentdarkapple Interesting! Hmmm! I can see why you think I would be L and you would be N. L doesn’t smile like meâ
OK, thatâs enough Hmming – on to point #5: âTick tockâ. Jester loves to say âTick tockâ â itâs one of his favorite phrases. Look:
6th March: âFrom 3.5 months ago:https://th3j35t3r.wordpress.com/2011/11/19/if-i-am-wrong-ill-say-im-wrong-heres-my-apology/…… from 1 hour ago ….http://www.foxnews.com/scitech/2012/03/06/hacking-group-lulzsec-swept-up-by-law-enforcement/ tick tock toldya.â
3rd August: â’RT @anonymousabu: @hjjrc @SparkyBlaze Your problem is with a ghost. Someone you can neither find nor stop.’ << you have same problem. #tickâ
27th July: â@anonymousabu tick tock.â
24th July: âTICK TOCK. #toldyac2dc37a7d9d3238877a127f2d5171c9dâ
21st June: âTickety Tock…..â
25th June blog entitled LulzSecâs Cloudflare Configuration: âTickety Tock Tock.”
Why, isnât that a quirky little phrase? I wonder if Captain Hook â sorry, Tom Ryan â also uses the same terminology. Oh, whatâs this we have here from 27th Feb?
â#Anonymous I am working on my big release. Hmmmm who should it goto? Tick Tockâ
Thereâs even a âHmmmmâ thrown in for good measure. How Jester-esque!
With a nudge and a wink, we move onto #6: Jester loves nothing more than to sign off his tweets with a sly wink. Just like so:
28th March: â@wwpinc – just in case you were not aware: >>>https://th3j35t3r.wordpress.com/support/ <<< – keep up the great work ;-) Peace. #pgr #wwp#woundedwarriorâ
26th March: âAl-Qaida forums crippled in suspected cyber intervention http://j.mp/GSd8ih << bad things happen to bad people, apparently ;-) #infosecâ
11th March: â@RepDanGordon @FBIPressOffice I merely stated u were on the list, u seem awful jittery. U need to calm down >> ;-)â
2nd Oct: âRT: @mach2600 @th3j35t3r It’s wobbling … up, down, up, down… <<< gotta love NGINX – always somethin huh ;-)â
16th June: âstandby for supporting clarification onhttp://th3j35t3r.wordpress.com/2011/06/16/quick-n-dirty-just-for-clarification/?utm_source=Jesters+Court+Blog&utm_medium=twitter – close ya eyes if ya already saw it yesterday. ;-)â
2nd June: âhttp://www.foxnews.com/scitech/2011/06/02/pentagon-has-secret-list-cyber-weapons/ – #justsayin;-) #oorahâ
Now itâs TRâs turn to have a sly wink:
5th April: âThe beauty of data-mining in a social world, I don’t need to be connected to you, so you can’t block me. You just need to be on my radar ;-)â
5th April: â@x_ryujin_x @render64 @bitchiest @kalyptonetthink of what full dox did for Sabu ;-)â
4th April: â@LauraWalkerKC @BobbyCarbon@NavySEALsORG @Packetknife @HonorThemYou should record it ;-)â
14th March: âTo Geeks & Nerds 3/14 is known as Pi Dayhttp://www.youtube.com/watch?v=JTZtuMdkUksTo Horny Men it’s known as Steak & Blow Job Day! The GF reminded me ;-)â
13th March: â@JackalAnon warned #Anonymous 2 Days Ago about OAuth and Apps. We’ve warned you about TOR. ;-)â
14th Feb: âWhy I’m Glad My Boyfriend Isn’t On Facebook – Forbes http://j.mp/z9XNrP by @kashhill | Leaving Facebook made me never want to go back ;-)â
Next up, itâs similarity #7 â âStay Frostyâ. This, Jesterâs catchiest of catch-phrases, crops up all over his tweets:
2nd April: âhttp://www.cbsnews.com/2100-202_162-20075647.html <<< still going on about this? Stay frosty and have a Cupcake??â
10th Nov: â#stayfrosty -Word of advice 2 @barrettbrownlol: Just because you’re paranoid doesn’t mean they aren’t out to get you. >â
26th Oct: â#hackerhalted left a little something under the projector in Alhambra SCADA room. Tweet me a photo of what’s there. #stayfrostyâ
25th Oct: â#hackerhalted delegates … Stay clear of Cafe Bastille. Great sushi at Bali Cafe though… Stayin frosty.â
Now letâs see what Monsieur Ryan has to say for himself:
10th April: âIran plans to unplug the Internet, launch its own “clean” alternative http://zite.to/Iqm1Ba#anonymous @CabinCr3w Stay Frosty ;-)â
16th March: â@testeux1 Class on Strategy? I can teach one at The Spy Museum in DC @wikileaks @revmagdalen@AnonymousIRC @YourAnonNews Stay Frosty ;-)â
13th March: â#Anonymous in your time of fear those of you that have used delete.twitlan / tweeteraser / twitwipe A Special Thank You!!! Stay Frosty! ;-)â
13th March: â@jackie_singh @krypt3ia I was promoted today to Brigadier General Packet of The Cyber Brigade@th3j35t3r now reports to me! Stay Frosty ;-)â
12th March: âFinch + Reese = ;-) …. Stay Frosty & Watch Your 6!â
Hang on a sec, isnât it a bit, well, *obvious* for Tom Ryan to be liberally dropping Jesterâs favorite catchphrase into his tweets? Yep, youâre right â itâs very obvious. But hereâs the thing: the AntiSec dox that named Jester as Tom Ryan landed in Pastebin on 11th March. Notice how TR deliberately goes out of his way to play up to the âStay Frostyâ caricature in the ensuing days? Thatâs because he realizes that the more he pretends to be Jester, the more people will be inclined to write him off as just another Jester wannabe. For another example of this tactic, hereâs how J tweets every time he downs a Muslim extremist website:
1st March: âhttp://www.rjfront.info – TANGO DOWN. Temporarily. For enabling recruitment, & co-ordination of jihadist terror cells via web.â
1st March: âhttp://www.atahadi.com – TANGO DOWN. Temporarily. For online incitement to cause young muslims to carry out acts of violent jihad.â
Exactly one month later, on 1st April, TR tweets the following:
âwww.ic3 .gov – TANGO DOWN. Temporarily. For not doing your job, & not arresting #Anonymousâ
And: âwww.fbi .gov – TANGO DOWN. Temporarily. For enabling recruitment, & co-ordination of#Anonymous via web.â
At this point, obvious troll is obvious â within days of LulzKittenâs tweet linking Tom Ryan and Jester, TR goes out of his way to tweet âStay Frostysâ, Jester winks and âTANGO DOWNâs. To give him credit, itâs a pretty smart way to make people think youâre nothing more than a Jester fanboy. Sadly for Thomas, itâs too late; the evidence linking Tom Ryan to Jester began from the moment TR began tweeting in January 2012. Prior to AntiSec dropping Jesterâs dox on 11th March, Tom Ryan had only tweeted âStay Frostyâ twice in three months. Immediately afterward, he tweets it five times in four days â complete with the Jesterâs trademark wink.
So does that mean that all of the foregoing information is is part of an elaborate ploy, cooked up by Tom Ryan and Jester, to obfuscate the identity of the real Jester? In the case of the âStay Frostysâ and the âTANGO DOWNâs, yes, it probably is. Thankfully, there are dozens of other textual similarities between the pair â similarities that are too subtle to be part of a pre-planned disinformation campaign.
Which leads nicely on to point #8: âMuchâ. Note the phrase that appears in the following tweets from Jester:
18th June: âhttp://www.techhomethebacon.com/news/hacking-infosec/th3j35t3r-links-nakomis-to-lulzsec-group-cover-up-ensues.html – backpeddaling much? Hacked? lol. -â
18th June: âBack-pedalling much?https://twitter.com/#!/Anonakomis/status/81862870664609792 #jsâ
August 21st WordPress blog entitled If ya canât beat em, make some shit up??? LMAO!: âcoincidence much?â âprojection much??â
I wonder if TR ever lets slip a similar phrase? Oh, whatâs this?:
14th March: â@kaepora Nadim, delete much? You’re in the snitch crew ?https://twitter.com/#!/realytcracker/status/143411708369715201 of @Anonymousabu & @ioerrorâ
Coincidence much?
#9: Jester loves to leave trailing dots in his tweets:
9th April: â<<< drums fingers on desk….â
3rd April: âNow…… imagine…… how many of those listed in my last, were ummmmmm – on the ‘shit list’ – just a thought??? #anonymousâ
22nd November: âAFK…….â
He also uses trailing dots when heâs typing live into Notepad in this YouTube video: http://www.youtube.com/watch?v=WeO44IWlkfU
More of Jesterâs âtrailing dotsâ tweets are cited at the end of this dox. Now itâs TRâs turn to deploy this tactic:
6th April: â@kennethlipp that’s how it went down with Barrett Brown too. Remember they ended up going to every address for him….according to himâ
5th April: â@Bitchiest @KalyptoNet @TomRyanBlog The Secretary disavows this tweet and everybody in it…â
4th April: â#Anonymous ever wonder why certain high ups in your collective are never V& …. Look at cases that never went to court & who has relocatedâ
Again, more examples of this idiosyncrasy can be found cited at the end of this dox, as well as liberally scattered throughout Tom Ryanâs Twitter feed.
#10: Arrows. Jester loves to use arrows to break up words in his tweets, <<just like this>>:
9th April: â”@VizFoSho: @th3j35t3r dun goofedhttp://www.picvalley.net/u/1980/407013641289457528133400533586itAR4VE93lm7DAkGd2.PNG@RepDan_Gordon” <<< Shit ya got me! What am I to do? Btw now I am near north pole.â
28th March: â@wwpinc – just in case you were not aware: >>>https://th3j35t3r.wordpress.com/support/ <<< – keep up the great work ;-) Peace. #pgr #wwp#woundedwarriorâ
Now TR:
6th April: âHmmm So @AnonW0rmer is arrested at 10:30http://j.mp/HiAASP tweets till 3:32, @ItsKahunadisappears @AnonymousIRC disappears for 4 Day >>>â
13th March: âDon’t know whether to laugh or feel bad but come on: (compatible;+MSIE+6.0;+Windows+98;+Win+9×4.90) << In This Day An Age??â
9th March: âconspiracy 1. a plan or agreement to carry out an illegal or harmful act 2. the act of making such plans >> aka #Anonymous Ops #justsayin<<â
Glance through their tweets and youâll see that J and TR use <<arrows>> all the time.
#10: UPPER CASE. Compare the tweets of J and TR and youâll notice that they both love to highlight single words in capitals. Jester first:
9th April: âWARNING: Tweeps in mirror are closer than they appear.â
18th March: âI’m still asked WHY I hit #wikileaks, skip to 28mins 12secs & Major TJ O’Connor abt sums it uphttp://www.youtube.com/watch?v=buY3I4PkK98<<worth watching it all.â
11th March: â@repdangordon be advised, when u file ur complaint to feds, they ARE going need ur cell for forensics to determine IF I hacked u at all ;-( â
Tom Ryanâs turn:
5th April: âINTERESTING: What is this ugly brown stain on a Key Member of Anonymous’ back? I need to do my cropping for the new site launch. Peace!â
5th April: â#Anonymous why so many military and sovereign citizen connections? GOD I aam glad I took 2 weeks to lay low.â
4th April: â@MaxVenator Too cold and windy for the Hamptons BUT you gave me a good idea. Maybe we can turn Plum Island into a resort for#Anonymousâ
Jester and Tom Ryan both use this technique DOZENS of times in their tweets.
#11 features a more subtle similarity between our Jester and our Clown:
Jester, 21st August: âIf ya canât beat em, make some shit up??? LMAO! -â
TR, 16th March: â@exiledsurfer ROFLMAO! Reminds me of being in Bahrain & Abu Dhabi hearing Garth Brooks “Friends in Low Places”â
Jester and Thomas donât always laugh their asses off, but when they do, you can bet itâs in upper case with an exclamation mark at the end. (More examples, as always, are cited in the conclusion of this dox.)
#12: J and TR arenât very good at spelling. They struggle especially with words such as âitsâ and âitâsâ. Jesterâs tweets arenât usually too bad for typos, as he doesnât rush them (because he knows they will be analyzed by a wide range of foes who might otherwise have cause to mock him for his poor grammar). He also has the autocorrect on his Android phone to help him. He still struggles with those pesky apostrophes that autocorrect canât pick up however, especially when he tweets from his desktop:
6th March: âWTF is Wikileaks gonna do now it’s source of illegally obtained private info (anon/lulz) has had it’s head & skillset removed? #2birds1Stoneâ
21st June: âSeems almost as if ‘somebody’ doesn’t want you to see my last link – here’s a pastebin of it’s content.â
In his WordPress blog however, Jester often mixes up his apostrophes, especially in words such as âitsâ:
âWith Netcat listening at the other end for incoming connections, you can configure it to execute itâs own script when it receives a connection for example to send a Message of the Day to the connecting device, you would run netcat like this on your serverâ
Watch his two YouTube videos (links cited at the end) in which he types directly into Notepad and youâll see he also fails to put apostrophes into words such as âletsâ, âitsâ and âThatsâ. 2:20 into his XerXes DoS Attack video and youâll see that the text displayed on Jesterâs self-designed software also contains typos: âSUCCESFULLYâ should have two âsâ in the middle, while at 2:29, youâll see that âSecuredâ has also been spelt wrongly. At 6:52 he also makes the same error when typing into Notepad.
Does Tom Ryan fare any better in the spelling stakes? No. In fact heâs even worse when it comes to tweeting typos. Thatâs because Thomas tweets ten times as frequently as Jester, tweets more hastily (lots of rushed replies to his Twitter buddies) and because he writes the tweets on his Mac, which doesnât autocorrect his mistakes. Look:
4th April: â@AdrianChen surprised your not all over the@Anonw0rmer arrest and shortly after the disappearance of @itskahunaâ
5th April: âTo those I owe something too, It’s on it’s way!â
30th March: âRED ALERT: tomorrow is #NoClick31 just as a precaution. Rumor has it #Anonymous is using it’s Porn Bots for #opBlackout click to DDOS attackâ
Wanna see more? Just read his tweets.
OK, weâve almost reached the really juicy stuff linking Jester and Thomas, but first there are a couple more writing similarities to rattle through:
#13: J and TR write numbers numerically rather than alphabetically â even when composing short tweets.
Jester, 28th Feb: â4 more Anons V&’ed http://tinyurl.com/8a2g5k5#anonymousâ
10th Nov: â#stayfrosty -Word of advice 2 @barrettbrownlol: Just because you’re paranoid doesn’t mean they aren’t out to get you. >â
27th November: â#saladin (XerXes bro)- ‘the best weapon is the one u never have 2 fire…I prefer the weapon u only need 2 fire once.’â
20th July: âNever saw a wild thing sorry 4 itself. Small bird drop frozen dead from bough without ever having felt sorry 4 itself.â
TR â yep, youâve guessed it â does exactly the same:
5th April: â@ohmylulz will with 2 False Positives.@missarahnicole @AsherahResearchâ
4th April: âRuh roh! A certain key #Anonymous member disappears for 4 days then reappears. We know what that means.â
3rd April: â@Ihazcandy I should start digging into them. Since I have 2 weeks of downtime.â
OK, moving on (weâre nearly done, I promise) to #14: Hashtags. If you go to tweetstats.com and enter TR and Jâs twitter names into separate windows, a series of pretty graphs will be generated that will allow you to compare their tweeting patterns. Youâll notice that they tweet from separate devices, to eliminate the possibility of accidentally tweeting to the wrong account – Tom Ryan likes to keep his iPhone in one pocket and his Android in the other for when heâs playing Jester. Click on the Tweet Cloud tab at the top of the page and youâll be able to view the most frequent hashtags used by both parties. Not too surprisingly, given their obsession with all things masked, itâs #anonymous. There are also three other hashtags that the pair use prominently however â #fail, #justsayin and #infosec. The latter one is understandable, but the other two? Interesting. Letâs see some #fail and #justsayin in action, starting with Jester:
3rd November: â#opcartel #anonymous You should really listen to what this man has to say. Remember your track record is full of #failâ
15th August: â@anonymousabu U R #fail. U hurt who u claim to fight for (lol), u have agenda < http://reg.cx/1Qps& the agenda is >â
14th August: âSo @landrytom u finally got ur mention. Damn u zeroed my ‘xchat’? Please all check out his timeline. Then ask him where is the pwnage? #failâ
29th July: â1st up: My doxing. That’s a #fail. (again) I have never been Ryan Berg, John Willander, Robin Jackson, Anthony Freed, Beau Colvin. #opFrostyâ
2nd June: âhttp://www.foxnews.com/scitech/2011/06/02/pentagon-has-secret-list-cyber-weapons/ – #justsayin;-) #oorahâ
Now itâs Tom Ryanâs turn to #Fail (#Justsayin):
5th April: â@agentdarkapple @AsherahResearch she’s definitely is no @elizadushku , Mila Kunis or Megan Ackerman. So she’s a #Failâ
2nd April: â@subverzo TY for verifying 2 alternate personas yours & @CrappyTires . FYI, Everyone in the CT world knows Shumukh al-Islam Forum. #FAILâ
9th March: â@AnonymousIRC you do know they rig cases to#FAIL inorder to capture bigger FISH ….. Right?@atopiary @lolspoon @AnonymouSabuâ
9th Feb: âDangerous Tweets: Arrested, fined in 140 characters or less http://j.mp/yWAV4G << What ever happened to contextual analysis? another#Failâ (Note the classic Jester-style arrows used in this tweet as well.)â
10th March: â#anonymous remember threatening people or family members can lead to several crimes. If they are harmed it becomes much worse. #justsayinâ
9th March: âconspiracy 1. a plan or agreement to carry out an illegal or harmful act 2. the act of making such plans >> aka #Anonymous Ops #justsayin<<â
Plenty more examples, as always, can be found cited in the footnotes at the end of this dox.
OK, here endeth the writing analysis lesson. Thank you for your patience :) It would be fair to say weâve established that Jester and Tom Ryan tweet in an uncannily similar manner, but thatâs not all. Now we get on to the really good shit…
#15: Tweet times. Using tweetstats.com, itâs possible to compare the times at which J and TR tweet. A quick glance at their respective Tweet Density graphs reveals a similar pattern:Â neither of them tweets between 3am and 7am EST: theyâre both East coast bitches. Interesting.
#16: A few days ago, @VizFoSho tweeted the following image:
http://www.picvalley.net/u/1980/407013641289457528133400533586itAR4VE93lm7DAkGd2.PNG
It depicts two Jester tweets from 7th April, both geo-stamped with Atlantic City, NJ on them. Atlantic city is within 150 miles of NY, where Tom Ryan lives. On 26th March, Jester also posted a single tweet from New York: https://twitter.com/#!/th3j35t3r/status/184333789697282048
Normally, Jesterâs tweets donât reveal his location. Up until April 2012, there had only been four instances in which Jesterâs tweets revealed his location â and two of those occurred when he was at DEFCON Nevada and Hacker Halted in Miami, occasions when he was undoubtedly eager to reveal his location in order to prove he was in attendance. Were the New York and Atlantic City revelations accidental (Tor for Android not working properly perhaps?) or was Jester trying to provide more misinformation?
After @VizFoSho pointed out the NJ link (the NY slip-up had gone unnoticed), Jester went out of his way to post two tweets from ridiculously exotic locations â Cape Town on 9th April and then Hawaii on 10th April:
https://twitter.com/#!/th3j35t3r/status/189464600318722049
https://twitter.com/#!/th3j35t3r/status/189464600318722049 âThe octopus here is amazing. Dontcha think :-)â
Jester has never previously switched his location to a far-flung location purely for the lulz. Why should he suddenly be trying so hard now that heâs been identified as an East coast slacker? If heâs not Tom Ryan, why should be bothered if people think heâs from NJ or NY?
On 4th April, Jester made the second of his two Atlantic City tweets at 4:03pm. 11 minutes earlier, Tom Ryan had also posted a tweet. For the next 48 hours, neither account tweeted â a rare occurrence, especially for TR who averages over 30 tweets a day. Enjoying a couple of days in Atlantic City playing the slots, perhaps?
Here are the 4th April tweets from both parties:
https://twitter.com/#!/th3j35t3r/status/187610604314431488
https://twitter.com/#!/th3j35t3r/status/187616455762784257
https://twitter.com/#!/TomRyanBlog/status/187612824187584512
Curiouser and curiouser. But thatâs not all. On 23rd March, TR tweets:
âHeaded to South Beach to enjoy this great weather! Later Tweeps!â
https://twitter.com/#!/TomRyanBlog/status/183199880922148864
For the next 48 hours, Jester and Tom Ryan are both absent from Twitter.
A month earlier, on 17th February, the same thing happens after TR tweets:
âOff the Grid for a few days ! Have a great 3 day weekend!â
https://twitter.com/#%21/TomRyanBlog/status/170321854723129344
For the next four days, neither party tweets. The first person to break the Twitter silence is Jester, and itâs another rare instance of him revealing his location â Arlington VA.
https://twitter.com/#!/th3j35t3r/status/172077181051219968
Enjoy your three-day weekend, Thomas?
I stated earlier that until April Jester had never previously switched his location to a far-flung country, but I lied â there IS actually one occasion when Jester appeared to be out of the country. On 25th January, he posted the following tweet:
âTo all who have DM’ed asking after my whereabouts & welfare…am safe & limbering up. It’s a brave new year. TY 4 support. Stay Frosty.â
https://twitter.com/#!/th3j35t3r/status/162261098035298304
His alleged location? Brescia, Italy. What about Thomas Ryan â what was he up to around this time? Well hereâs the thing: between 23rd and 26th January, TR (a man who likes to tweet all day, erryday) doesnât post a single tweet. Too busy enjoying the bruschetta, washed down with a bottle of Barolo perhaps?
A final word on correlating Twitter times before we move onto our final two points: take a look at the timeline for Jester and Tom Ryanâs tweets. Notice how they often tweet at almost exactly the same time as one another? For example, take Tuesday 10th April. After two hours without activity from either account, Thomas posts the following at 15:30pm:
âNow I feel really special. Someone created a hidden stream about me and monitors it.â
One minute later, at 15:31, Jester tweets â@alemarahwebâ â âhttp://www.alemara1.comâ â TANGO DOWN – ŘŁŮا ŮŮŘŞâ
Observe any two Twitter accounts for long enough and youâll find timing coincidences of course. However, compare Jester and Tom Ryanâs accounts on any given day and youâll spot a predictable pattern: they always broadly correlate i.e. there is a short burst of tweets, followed by a 45 minute break while Jester/Ryan goes for a wank or to chow down some beef jerky.
Right, two more points to raise and then Iâll leave you in peace:
#17: When LulzKitten tweeted Jesterâs dox on 29th March, how did Tom Ryan â the man with the military wallpaper on his Twitter page â respond? â@J_P_Holloway @lulzkitten @YourAnonNewsyou guys really suck at DOXing thinking I am@th3j35t3r everyone knows I was never in the Army #failâ
https://twitter.com/#!/TomRyanBlog/status/185189598677319680
Two things stand out here: firstly, we have no way of knowing that Jester was in the army. Yes, he has an interest in all things military, but the rumor that he actively served in the army is widely believed to be false.
On 13th March however, TR tweeted the following: âWhen I was in the military, Greenpeace would try to board Aircraft Carriers. Some things aren’t smart & never thought of till it’s too late.â
https://twitter.com/#!/TomRyanBlog/status/179637065154170880
Military, shmilitary; does anyone see a connection here? Thought so. Without further ado, letâs proceed to our final, fateful tweet of interest. On 10th February, Thomas Ryan tweeted the following:
âI wonder if operating Multiple Personas has ever given anyone Multiple Personality Disorder.â
I donât know Jester, you tell me ;) Tick tock. No response? Oh well, Stay Frosty…
**********
POSTSCRIPT: Could it be that Tom Ryan is such an attention-whore that heâs trolling us all in the hope of being mistaken for the Jester? I guess itâs technically possible, but if so, itâs the most elaborate and painstaking trolling campaign ever conceived â and one that would have to involve the collusion of both parties. If, by some miracle, Thomas Ryan is not Jester, he knows exactly who Jester is â to the extent where he probably even vacations with him. When you review all the evidence however, there can only be one logical conclusion to draw: they are one and the same person.
On 13th March, Tom Ryan posted the following poignant message: â@ArtByAlida although Anonymous doesn’t like@th3j35t3r I do. It’s safer that certain people are never doxed.â
https://twitter.com/#!/TomRyanBlog/status/179636120710152192
Youâre right Tom â it would be safer, but the truth always comes out in the wash, donât you find? I hope youâve got a few passports lying around, cos youâre gonna need them. Remember those Muslim extremists whose websites you downed and whose threats you retweeted? Oh, they mad. They real mad.
One last thought before I shovel the dirt over Jesterâs shriveled corpse: I notice that your Twitter nick is Boondock Saint, in tribute to The Boondock Saints, a movie about two Irish vigilantes. Just out of interest, I wonder what The Internet Surname Database would make of Thomas Ryanâs moniker?
http://www.surnamedb.com/Surname/Ryan
Why, they appear to believe that Ryan is an Irish surname. To quote from my favorite hacktivist for good, âCoincidence much?â
Congratulations Thomas; you just got pwned by an amateur who doesnât even have the skills to label himself a skid, never mind a hacker. Butthurt much?
In the words of your nemesis, @anonymouSabu, âNigga, troll harder.â
pwned by @spoolfiend
**********
Citations:
LulzKitten tweet linking TR and J: https://twitter.com/?utm_medium=twitter&utm_source=twitterfeed#!/YourAnonNews/statuses/185150794079809536
Check when th3j35t3r and RobinSage joined Twitter: http://www.whendidyoujointwitter.com/
TRâs LinkedIn (where youâll see proof that he attended Hacker Halted and DEFCON last year): http://www.linkedin.com/in/tommyryan
TR and J professing their love of sushi:
https://twitter.com/#!/TomRyanBlog/status/178202424056610817
https://twitter.com/#!/th3j35t3r/status/128849629939892224
Tom Ryan dox by AntiSec: http://pastebin.com/ZAxBWKi8
J likes to say âHmmmâ a lot:
https://twitter.com/#!/th3j35t3r/status/187996120180457472
Occupy Wall Street?? 99%?? Ummm.
https://twitter.com/#!/th3j35t3r/status/186958030791905282
https://twitter.com/#!/th3j35t3r/status/174163673940631552
https://twitter.com/#!/th3j35t3r/status/182268058168082432
https://twitter.com/#!/th3j35t3r/status/187535767843778560
TR also likes to say âHmmmâ:
https://twitter.com/#!/TomRyanBlog/status/188096685250068480
https://twitter.com/#!/TomRyanBlog/status/180117386291195906
https://twitter.com/#!/TomRyanBlog/status/178896960546287617
https://twitter.com/#!/TomRyanBlog/status/177482894443417600
https://twitter.com/#!/TomRyanBlog/status/170195932388925441
https://twitter.com/#!/TomRyanBlog/status/189680060863754241
J goes âTick tockâ:
https://twitter.com/#!/th3j35t3r/status/96268183723450369
https://twitter.com/#!/th3j35t3r/status/177033974324002816
https://twitter.com/#!/th3j35t3r/status/83145887307677696
https://twitter.com/#!/th3j35t3r/status/95195869921554433
https://twitter.com/#!/th3j35t3r/status/98828156663889920
Lulzsec’s CloudFlare Configuration
TR goes âTick tockâ:
https://twitter.com/#!/TomRyanBlog/status/174132025215811585
J âStay frostyâ:
https://twitter.com/#!/th3j35t3r/status/186923663734489088
https://twitter.com/#!/th3j35t3r/status/134434056925483008
https://twitter.com/#!/th3j35t3r/status/129246959021203456
https://twitter.com/#!/th3j35t3r/status/128849629939892224
https://twitter.com/#!/th3j35t3r/status/81862725638160385
https://twitter.com/#!/th3j35t3r/status/76373640832225282
TR âStay frostyâ:
https://twitter.com/#!/TomRyanBlog/status/189679107347460097
https://twitter.com/#!/TomRyanBlog/status/180689040385900544
https://twitter.com/#!/TomRyanBlog/status/179655809280655361
https://twitter.com/#!/TomRyanBlog/status/179298552680415232
https://twitter.com/#!/TomRyanBlog/status/178571536691765249
https://twitter.com/#!/TomRyanBlog/status/178529239052730368
https://twitter.com/#!/TomRyanBlog/status/178336251240382464
https://twitter.com/#!/TomRyanBlog/status/179622057305317376
https://twitter.com/#!/TomRyanBlog/status/179802508372344832
J likes to wink:
https://twitter.com/#!/th3j35t3r/status/184373769958211584
https://twitter.com/#!/th3j35t3r/status/120271829377097728
https://twitter.com/#!/th3j35t3r/status/76373640832225282
https://twitter.com/#!/th3j35t3r/status/185019516793786370
https://twitter.com/#!/th3j35t3r/status/81477469135319040
https://twitter.com/#!/th3j35t3r/status/178878010961833986
TR likes to wink:
https://twitter.com/#!/TomRyanBlog/status/187885131976024064
https://twitter.com/#!/TomRyanBlog/status/187372927946211328
https://twitter.com/#!/TomRyanBlog/status/179932280809197568
https://twitter.com/#!/TomRyanBlog/status/180689040385900544
https://twitter.com/#!/TomRyanBlog/status/189679107347460097
https://twitter.com/#!/TomRyanBlog/status/169492746871119873
https://twitter.com/#!/TomRyanBlog/status/179655809280655361
https://twitter.com/#!/TomRyanBlog/status/179802508372344832
https://twitter.com/#!/TomRyanBlog/status/179669923163938816
https://twitter.com/#!/TomRyanBlog/status/187914228810784769
J âmuch?â:
https://twitter.com/#!/th3j35t3r/status/82200919365787648
https://twitter.com/#!/th3j35t3r/status/81871769832665088
If ya can’t beat em, make some shit up??? LMAO!
TR âmuch?â:
https://twitter.com/#!/TomRyanBlog/status/179927195022659584
J â…â:
https://twitter.com/#!/th3j35t3r/status/189139338796351492
https://twitter.com/#!/th3j35t3r/status/186958030791905282
https://twitter.com/#!/th3j35t3r/status/186749312166932483
https://twitter.com/#!/th3j35t3r/status/128849629939892224
https://twitter.com/#!/th3j35t3r/status/138951576789331968
https://twitter.com/#!/th3j35t3r/status/168769540598145025
https://twitter.com/#!/th3j35t3r/status/179233292682407937
https://twitter.com/#!/th3j35t3r/status/184321677092597760
TR â…â:
https://twitter.com/#!/TomRyanBlog/status/188088227704487936
https://twitter.com/#!/TomRyanBlog/status/187342615648272384
https://twitter.com/#!/TomRyanBlog/status/188829946439929856
https://twitter.com/#!/TomRyanBlog/status/189449964219400194
https://twitter.com/#!/providesecurity/status/187253830315016192
https://twitter.com/#!/TomRyanBlog/status/189757038778269696
https://twitter.com/#!/Render64/status/187912159655772161
J â<<arrows>>â:
https://twitter.com/#!/th3j35t3r/status/189463655811780609
https://twitter.com/#!/th3j35t3r/status/185019516793786370
TR â<<arrows>>â:
https://twitter.com/#!/TomRyanBlog/status/179683104972210176
https://twitter.com/#!/TomRyanBlog/status/188096685250068480
https://twitter.com/#!/TomRyanBlog/status/177907983227949056
https://twitter.com/#!/TomRyanBlog/status/178555495806803968
https://twitter.com/#!/TomRyanBlog/status/179321093897723904
J using UPPER case:
https://twitter.com/#!/th3j35t3r/status/189165520556277761
https://twitter.com/#!/th3j35t3r/status/178895612723478531
https://twitter.com/#!/th3j35t3r/status/181438361511280640
https://twitter.com/#!/th3j35t3r/status/82538803188862976
https://twitter.com/#!/th3j35t3r/status/98386681836736512
https://twitter.com/#!/th3j35t3r/status/177544329458491392
https://twitter.com/#!/th3j35t3r/status/135438221483048960
https://twitter.com/#!/th3j35t3r/status/177568887334903808
https://twitter.com/#!/th3j35t3r/status/110676313366462464
https://twitter.com/#!/th3j35t3r/status/127396730621788160
https://twitter.com/#!/th3j35t3r/status/100282273072549890
https://twitter.com/#!/th3j35t3r/status/178566407909412866
https://twitter.com/#!/th3j35t3r/status/132173511874711552
https://twitter.com/#!/th3j35t3r/status/94485325744848896
https://twitter.com/#!/th3j35t3r/status/97333572955947008
https://twitter.com/#!/th3j35t3r/status/91970882095943680
https://twitter.com/#!/th3j35t3r/status/141002481260961792
TR using UPPER case:
https://twitter.com/#!/TomRyanBlog/status/187908914417893379
https://twitter.com/#!/TomRyanBlog/status/188461215348031489
https://twitter.com/#!/TomRyanBlog/status/187018163567853568
https://twitter.com/#!/TomRyanBlog/status/185423913197637633
https://twitter.com/#!/TomRyanBlog/status/187240901574266881
https://twitter.com/#!/TomRyanBlog/status/180380942614016001
https://twitter.com/#!/TomRyanBlog/status/187903623693467648
https://twitter.com/#!/TomRyanBlog/status/187361681452699649
https://twitter.com/#!/TomRyanBlog/status/187541167972417536
https://twitter.com/#!/TomRyanBlog/status/187322975383588864
https://twitter.com/#!/TomRyanBlog/status/187309018623127552
https://twitter.com/#!/TomRyanBlog/status/187558445036216320
https://twitter.com/#!/TomRyanBlog/status/187541167972417536
https://twitter.com/#!/TomRyanBlog/status/187656738818899968
https://twitter.com/#!/TomRyanBlog/status/187261297669308416
https://twitter.com/#!/TomRyanBlog/status/187530160134828032
https://twitter.com/#!/TomRyanBlog/status/184620737821286402
Jester âLMAO!â:
https://twitter.com/#!/th3j35t3r/status/105305979733815296
TR âROFLMAO!â:
https://twitter.com/#!/TomRyanBlog/status/180709354624925696
https://twitter.com/#!/TomRyanBlog/status/179773457943371776
https://twitter.com/#!/TomRyanBlog/status/187709243087003650
https://twitter.com/#!/TomRyanBlog/status/186965988082843648
https://twitter.com/#!/TomRyanBlog/status/187272732147322880
https://twitter.com/#!/TomRyanBlog/status/187583747154132992
J struggles with apostrophes:
https://twitter.com/#!/th3j35t3r/status/83239272504770560
https://twitter.com/#!/th3j35t3r/status/177080046597578752
https://twitter.com/#!/th3j35t3r/status/186749312166932483
(See his blog for heaps more examples.)
http://www.youtube.com/watch?v=WeO44IWlkfU (Skip to 5:07); âletsâ, âitsâ and âThatsâ should all have apostrophes.
http://www.youtube.com/watch?v=yJTvzErKHWE Look at the Notepad heâs typing into: âletsâ should have an apostrophe and âpeakâ should have two âeâs in it. Skip to 2:20: the text on Jesterâs self-designed Xerxes machine also contains typos: âSUCCESFULLYâ should have two âsâ in the middle. At 2:29, youâll see that âSecuredâ has also been spelt wrongly. At 6:52 he also types the same misspelt word into Notepad.
TR also struggles with apostrophes:
https://twitter.com/#!/TomRyanBlog/status/187920367845781504
https://twitter.com/#!/TomRyanBlog/status/187710784690855936
https://twitter.com/#!/TomRyanBlog/status/180432605680902144
https://twitter.com/#!/TomRyanBlog/status/187645320442822656
https://twitter.com/#!/TomRyanBlog/status/187531807598714880
https://twitter.com/#!/TomRyanBlog/status/187917710498336769
https://twitter.com/#!/TomRyanBlog/status/185737304290234368
https://twitter.com/#!/TomRyanBlog/status/178485680899502081
J tweets âTANGO DOWNâ:
https://twitter.com/#!/th3j35t3r/status/175040242477318144
https://twitter.com/#!/th3j35t3r/status/175029005718794240
TR tweets âTANGO DOWNâ:
https://twitter.com/#!/TomRyanBlog/status/186482996352778240
https://twitter.com/#!/TomRyanBlog/status/186482690797744128
J always writes numbers numerically:
https://twitter.com/#!/th3j35t3r/status/174540542724669441
https://twitter.com/#!/th3j35t3r/status/93771304607563776
https://twitter.com/#!/th3j35t3r/status/114830590452310016
https://twitter.com/#!/th3j35t3r/status/134434056925483008
https://twitter.com/#!/th3j35t3r/status/140925221090758656
https://twitter.com/#!/TomRyanBlog/status/185576329712910336
TRB always writes numbers numerically:
https://twitter.com/#!/TomRyanBlog/status/187211721365139456
https://twitter.com/#!/TomRyanBlog/status/187712594373648384
https://twitter.com/#!/TomRyanBlog/status/178965908696481793
https://twitter.com/#!/TomRyanBlog/status/187680293984022529
https://twitter.com/#!/TomRyanBlog/status/187539614876176384
Compare TR and Jâs tweet patterns, in particular the time of day they tweet at and the hashtags they use: http://tweetstats.com (Open two separate windows and enter their Twitter names).
J using #Fail:
https://twitter.com/#!/th3j35t3r/status/132152349639720960
https://twitter.com/#!/th3j35t3r/status/103200916156588032
https://twitter.com/#!/th3j35t3r/status/102784136015646722
https://twitter.com/#!/th3j35t3r/status/97030633330716674
https://twitter.com/#!/th3j35t3r/status/178966110694150144
J using #Fail:
https://twitter.com/#!/TomRyanBlog/status/187708057344671744
https://twitter.com/#!/TomRyanBlog/status/167697098047889411
https://twitter.com/#!/TomRyanBlog/status/177978089203175424
https://twitter.com/#!/TomRyanBlog/status/178269119316107264
https://twitter.com/#!/TomRyanBlog/status/186927307544477697
https://twitter.com/#!/TomRyanBlog/status/178573080438898689
https://twitter.com/#!/TomRyanBlog/status/178982123959619585
https://twitter.com/#!/TomRyanBlog/status/185189598677319680
https://twitter.com/#!/TomRyanBlog/status/186930868273676288
https://twitter.com/#!/TomRyanBlog/status/186965988082843648
J using #Justsayin:
https://twitter.com/#!/th3j35t3r/status/76373640832225282
TRB using #Justsayin:
https://twitter.com/#!/TomRyanBlog/status/177907983227949056
https://twitter.com/#!/TomRyanBlog/status/179578215411630080
https://twitter.com/#!/TomRyanBlog/status/178518183525888000
https://twitter.com/#!/TomRyanBlog/status/184620737821286402
https://twitter.com/#!/TomRyanBlog/status/184270112361168898
_________________________________________________________________________
PIRAX DOXING CONTINUED…Â (The ‘smedley manning’ debacle)
You took this DOX’ing really well, to be honest. You shook it off as a mere fancification numerous times, and continued forward head-strong, apparently unmoved by those watching from the outside. But you knew deep-down that you had to eradicate this DOX from the minds of the enemies you have procured over the years. You know that a lot of people would like to see you gone. So, you came up with a plan.
The plan went something like this:
On May 10th, you registered the Twitter account @cubespherical and labeled it as “Smedley Manning”, as an obvious satirical homage to the now imprisoned Bradley Manning, a REAL soldier who fought for truth. You then exchanged a few messages with @th3j35t3r to make it look like a legitimate conversation, and began to “leak” information about yourself. We both know that this information is false, and was only created to distract others from the real DOX, located above. We know you are somewhat intelligent. However, there will always be those who will outsmart you. Consider yourself outsmarted.
Here is the analysis, broken down:
After you took down both your Twitter and WordPress blog, the mainstream blogosphere was certain you had finally been figured out. They assumed this was your acknowledgement of your own defeat and were positive you had been successfully DOX’d by @cubespherical. You were finally giving up. You knew they would react this way… It was all a part of your master plan. But, in reality, you ARE @cubespherical. Yes, @th3j35t3r and @cubespherical are the same person. Nicely done, Tom. You fooled almost everyone. But, like all good things (“good” meaning something along the lines of “idiotic” in this case), you must come to an end.
So how can we justify this claim? Where is our proof? Simple: You gave us everything.
Red-Flag #1: You have been a pretty regular user of Twitter until very recently, after the above DOX was published.
Red-Flag #2: An entirely new DOX is now being teased, even while the above DOX is as sure-fire as they come. Who would believe that a DOX coming from @cubespherical, an entirely new one at that, would be legitimate?
Red-Flag #3: You sat idle on Twitter while @cubespherical AKA Smedley Manning openly talked shit about you, only responding once things became heated on InfoSecIsland. This will take some psychological investigation, but it is damning nonetheless. Your article here is the most revealing bit of all:
http://www.infosecisland.com/blogview/21348-Not-Totally-Sure-What-Just-Happened.html
You started off with the following line, paraphrased: “I thought Smedley was my friend at first [you used the word ‘supporter’] hurr durr, but he then started threatening me hurr durr.” That doesn’t even sound realistic. But it *is* a subtle way to garner sympathy. I applaud you for you effort.
Red-Flag #4: Next up is your subtle jab at Anonymous. You changed @cubespherical’s avatar to a picture of a Guy Fawkes mask and deleted the Bitcoin address in exchange for the “We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us.” motto.
In your article, you say “Even if this was a common troll, he just demonstrated that any fool can speak for and âasâ Anonymous.”
It is clear that you did this for one reason: to throw spears at Anonymous while appearing to be a victim of cyber-bullying on a much grander scale.
Red-Flag #5: You are subconsciously promoting @cubespherical’s efforts for Bitcoin donations.
While appearing to mock @cubespherical, while still somehow conveying him as a threat, you still manage to forget to *NOT* post his Bitcoin address. Our thoughts: You WANT @cubespherical to make some money off of some Bitcoin donations. You yourself use Bitcoin pretty regularly and accept it for donations on your blog. How do we know you aren’t just promoting @cubspherical’s Bitcoin address so that YOU can profit? Here are your words, directly lifted form your blog post:
“So hereâs the throwdown. âSmeddlesâ drop my dox. Do it. You have proved and shown nothing. Only that you are completely failing. You have no bitcoins donated, you have shown 2 things to me, Anonymous have too many chiefs and not enough indians, and that your numbers, at least 9000 allegedly, combined have 0.00000001 bitcoins between them. Here is what you have so far. lol.
https://blockexplorer.com/address/15JDgkwFVXvuxCt66eUQ434ty3jrvwPfGe
Either that or they were clever enough to realize you were full of it from the get go. As I have demonstrated and stated many times before, I will never ask the public for any money.”
WHY WOULD YOU EVEN NEED TO REMIND PEOPLE THAT YOU DON’T ASK FOR DONATIONS IF THIS ISN’T EVEN YOUR BITCOIN ADDRESS? Simple. Because it actually is.
It is also worth noting that both Smedley Manning and th3j35t3r favor Ubuntu 11.xx releases. They like using GNOME, too:
http://3.bp.blogspot.com/-9LpW_-t2lkU/TpmnnnPHn6I/AAAAAAAABMA/AKBOIZUm4sM/s1600/Opera-Next-Ubuntu-Oneric.png
http://4.bp.blogspot.com/_FJH0hYZmVtc/TF59PLnLUJI/AAAAAAAAJNE/IoVU8sTFyUo/s1600/Opera+Mobile+for+Linux+(1440×797)_023.png
To conclude this talk, Tom, we would like to take this privilege to give to you a formal FUCK YOU. You have been DOX’d and your master plan to avoid the inevitable by creating a new nemesis and a new DOX while asking fools to send you money for this bogus DOX has been foiled. You are over. No one cares about the small sites you take down with your shitty XerXes tool and everyone knows you didn’t actually DDoS WikiLeaks, or even have the ability to do so. You are a fame-whoring idiot that has finally been pulled so low, you serve no purpose for ever standing up again. Goodbye.
XOXO,
PiraX <3
@TheRealPiraX
http://pirax.de
Donate Bitcoin: 17gMaYgUsx7dj532s3ezXmfMrVhJ1BfRC1
We would also like to give a shout-out to our home on VoxAnon IRC. Much love to #voxanon _________________________________________________________________________
BUT THATS NOT IT – DON’T FORGET THIS LITTLE GEM…
Thomas Ryan: The Guy Who Snitched on Occupy Wall Street to the FBI and NYPD
The Occupy Wall Street protests have been going on for a month. And it seems the FBI and NYPD have had help tracking protestersâ moves thanks to a conservative computer security expert who gained access to one of the groupâs internal mailing lists,and then handed over information on the groupâs plans to authorities and corporations targeted by protesters.
Since the Occupy Wall Street protest began on September 17, New York security consultant Thomas Ryan has been waging a campaign to infiltrate and discredit the movement. Ryan says heâs done contract work for the U.S. Army and he brags on his blog that he leads âa team called Black Cell, a team of the most-highly trained and capable physical, threat and cyber security professionals in the world.â But over the past few weeks, he and his computer security buddies have been spending time covertly attending Occupy Wall Street meetings, monitoring organizersâ social media accounts, and hanging out with protesters in Lower Manhattan.
As part of their intelligence-gathering operation, the group gained access to a listserv used by Occupy Wall Street organizers called September17discuss. On September17discuss, organizers hash out tactics and plan events, conduct post-mortems of media appearances, and trade the latest protest gossip. On Friday, Ryan leaked thousands of September17discuss emails to conservative blogger Andrew Breitbart, who is now using them to try to smear Occupy Wall Street as an anarchist conspiracy to disrupt global markets.
What may much more alarming to Occupy Wall Street organizers is that while Ryan was monitoring September17discuss, he was forwarding interesting email threads to contacts at the NYPD and FBI, including special agent Jordan T. Loyd, a member of the FBIâs New York-based cyber security team.
Oh, and what do real PATRIOT VETERANS think … ?
VETERAN: We didnât âserve our countryâ; We serve the interests of Capital
âIâve seen a ton on the facebooks about âthanking veterans for their service.â As a veteran let me just be very straightforward and honest with you. We didnât âserve our countryâ; we donât actually serve our brothers/sisters or our neighbors. We serve the interests of Capital. We never risked our lives or spent months on deployment away from our family and friends so they can have this abstract concept called âfreedomâ. We served big oil; big coal; Coca-Cola; Kellogg, Brown, and Root and all the other big Capital interests who donât know a fucking thing about sacrifice. These people will never have to deal with the loss of a loved one or the physical and/or psychological scars that those who âserveâ, and their families, have to deal with for the rest of their lives. The most patriotic thing someone can do is to tell truth to power and dedicate yourself to building power to overthrow these sociopathic assholes. I served with some of the most real and genuine people Iâve ever met. Youâll never see solidarity like the kind of solidarity you experience when your life depends on the person next to you. But most of us didnât join for that; we joined because we were fucking poor and didnât have many other options.â      -Anonymous
IN CONCLUSION:Â An obvious desperate grab to stay relevant – Does anyone care?
ANSWER: jester who? Now back projects that create positive change in the world, instead of discussing individuals who support & enable the Military Industrial Complex of death, destruction, and global enslavement of Humanity.
OH AND FOR THOSE WHO FORGOT, A REMINDER:




