Jaap Titular, commenting at Climate Audit,
climateaudit.org/2018/07/19/a-r… has interesting take on key Indictment paragraph about word searches in Moscow yielding breadcrumb trail from #Guccifer2 - a key new link outside G2-DCLeaks "bubble".
climateaudit.org/2018/07/19/a-r… has interesting take on key Indictment paragraph about word searches in Moscow yielding breadcrumb trail from #Guccifer2 - a key new link outside G2-DCLeaks "bubble".
2/ Jaap points out that exact wording of paragraph doesn't make sense if you watch the pea (as we've learned to do in climate). The sentence as written rolls easily, but Jaap asks why you would log into a Moscow "server" to do a Google search.
3/ Jaap then observes that supposed reason why you searched your Moscow server for these words is "because you use those exact same words later in some piece that you are writing. ??? Does that even make sense ???"
4/ in associated comment climateaudit.org/2018/07/19/a-r… provides a more reasonable interpretation of Indictment para 41: that G2 logged into his PC, connected to Moscow-based VPN and began ordinary Google search for the identified words.
5/ Jaap's next question:"why they would search for words that they would later use in a document. I mean they simply used the exact same term that they searched for..they searched for ‘illuminati’ and then later used that term in the document. So why ‘search’ for it?" Why indeed?
6/ Jaap mulled over possibility that Indictment might have been imprecise: perhaps "they did not mean search but ‘translation’", but, against that, points out the term "dcleaks" is not likely to have been submitted to Translate.
7/ Jaap plausibly interpreted p41 allegation as: "G2 used a VPN service in Moscow and then used Google Translate to translate some terms from Russian into English. And then they later (#42) used these same English terms in a document that was later published by G2 (in the US)."
8/ Jaap observed that the effect of the search (SM: like the "Russian" metadata in G2's 1.doc) was a breadcrumb trail. He presumes that "search" for term "dcleaks" was plausibly through inclusion in text submitted to Google Translate.
9/ Jaap then observed that "you can use a VPN service located in Moscow from anywhere in the world, even from the US." and asks sensible question: "But why would you specifically want to use one located in Moscow? Assuming that you really are a Russian spy?" Yup.
10/ Jaap's alternative: use Google Translate to translate some terms from English into Russian. Then you start up (another) VPN session,.. select Russia..via VPN server in Moscow.. get Moscow IP address. Then go to Google Translate and put in your Russian terms." Breadcrumb trail
11/ in this context, @jeffreycarr 's acute analysis of spearphish use of yandex[.com email address bears re-reading. He not only pointed out possibility of false flag, but surmised that user didn't even speak Russian: see medium.com/@jeffreyscarr/…
