Profile picture
Stephen McIntyre @ClimateAudit
, 5 tweets, 2 min read Read on Twitter
Forensicator observed that displayed timestamps of comment insertion and of document save for the two Guccifer documents with Track Changes implied that G2 computer set on Pacific Time (-07:00).
theforensicator.wordpress.com/guccifer-2s-ru…
2/ There's another puzzle with June 30 documents. The Wordpress upload timestamp of dws-az-op-ed-comparison-doc_lm.docx was 2016-06-30 02:53:06Z, while (exif) document save timestamp was (impossibly) almost 7 hours later(!) 2016-06-30 10:23:00Z.
3/ this can occur (and this may be only way) if G2 computer were manually set 7 hours FORWARD from true time. I.e. it was manually set to read UTC, while time zone setting remained in Pacific (-07:00). Not true of all dates, but this appears to be the case for June 30 uploads.
4/ on other dates, there are suspiciously long gaps between document save times (exif ModifyDate) and seemingly concurrent Wordpress uploads (exif FileModifyDate). I cannot help but wonder if this is due to clock manipulation by G2 (for presently unknown purpose), and not true.
5/ above analysis of June 30 explains residual issue of Forensicator analysis of June 30 - computer display time. By manually changing clock time, this display issue would have been ameliorated.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Stephen McIntyre
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @ClimateAudit see all

Profile picture
@2xwide_dreaming @dr_davidsmith @wakeywakey16 @Larry_Beech @taleof2servers In that post, I mentioned an "Easter egg". I explained the Easter egg in a follow-up post climateaudit.org/2018/03/24/att…. There was an apparent infrastructure link between the Lurk banking gang and the spearphishing campaign attributed to APT28 (Fancy Bear) by SecureWorks.
@2xwide_dreaming @dr_davidsmith @wakeywakey16 @Larry_Beech @taleof2servers registrant of googlesetting[.com] domain used in the 2015 spearphishing campaign analysed by SecureWorks (June 26, 2016) is andre_roy@mail.com, also registrant for numerous domains in Oct 2014 PWC inventory pwc.blogs.com/files/tactical… of APT28 domains. Connecting spearphish to APT28.
@2xwide_dreaming @dr_davidsmith @wakeywakey16 @Larry_Beech @taleof2servers 2/ registrant of accoounts-google[.com, other domain used in 2015 spearphishing campaign, is "Gennadiy Borisov" with email yingw90@yahoo.com, used in scores of crimeware domains associated with Lurk's Angler exploit kit.
Read 22 tweets
Profile picture
1/ the number of "coincidences" in Russiagate never cease to amaze. In this thread, I'll discuss a surprising link between analysis of the 2015-2016 spearphishing campaign(which caught Podesta and others) and Ukrainian InformNapalm operatives. Precise meaning unclear
@Stranahan
2/ on June 16, 2016, the day after Crowdstrike's reveal article, SecureWorks secureworks.com/research/threa… reported tht they had been using bitly links to monitor a spearphishing campaign, which, between mid-March and mid-May had targeted both hillaryclinton.com and gmail accounts
3/ in a second article secureworks.com/research/threa… on June 26, 2016, SecureWorks described the techniques of the spearphishing campaign, providing several intriguing examples.
Read 13 tweets
Profile picture
1/ I'm following #manbij for news on Syria in wake of US departure announcement. Manbij is flashpoint. It's to east of Aleppo, west of Euphrates. It's held by SDF (Kurds). US still present. Turkey told Trump that they would deal with remnant ISIS. In very south far from Manbij.
2/ In fact, Turkey's objective seems to be to subjugate "PKK terrorists" i.e. the Kurdish militias employed by US (under alias SDF). To do so, they are deploying thousands of jihadis, presently mobilized north of Manbij.
yenisafak.com/en/news/nearly…
3/ many of the jihadis mobilized by Turkey appear to have previously identified as AlQaeda allies, AlQaeda and even ISIS. The logical force to deal with ISIS in south Syria is Syrian government. Which US has long prevented from crossing Euphrates to do so.
Read 24 tweets

Related threads

Profile picture
The #Forensicator has published a new post:

"#Guccifer2 Returns to the East Coast"

theforensicator.wordpress.com/2018/12/18/guc…
Forensicator was kind enough to provide @DisobedientNews with an introduction to his latest post, available here:

Forensicator: #Guccifer2.0 Returns To The East Coast

disobedientmedia.com/2018/12/forens…
#Forensicator:

"In this post, we announce a new finding that confirms our previous work and is the basis for an update that we recently made to #Guccifer2’s Russian Breadcrumbs."

theforensicator.wordpress.com/guccifer-2s-ru…
Read 18 tweets
Profile picture
The #Forensicator has published a brand new report: Analyses further information pointing to the intentional insertion of "Russian" metadata into all of #Guccifer2.0's batches of documents.

Guccifer2’s Russian Breadcrumbs

theforensicator.wordpress.com/guccifer-2s-ru…
We also published Forensicator's introduction, with permission, via Disobedient Media:

#Forensicator: #Guccifer2.0’s Russian Breadcrumbs

disobedientmedia.com/2018/11/forens…
While the #Forensicator's analysis is technically intense, we are honored to publish the introduction to his work, as it is precisely the type of observation that should have been made two years ago, by MSM tech writers.
Read 7 tweets
Profile picture
#Forensicator’s Analysis Supports #Assange’s Statements On The #DNC, #PodestaEmails

disobedientmedia.com/2018/09/forens…
"In view of the more recent work published by the #Forensicator regarding potential media collusion with #Guccifer2.0, we are inclined to revisit an interview given by #WikiLeaks Editor-In-Chief #JulianAssange in August of 2016.."

"The significance of revisiting #Assange’s statements is the degree to which his most significant claim is corroborated or paralleled by the #Forensicator’s analysis."
Read 6 tweets
Profile picture
Live Q & A with Q
(Board is lagging due to high traffic)
First question...

Anything about Trudeau...

What about the owl?
Q's answer.

Canada was used to help spy on Trump through the FVEY agreement and to funnel uranium to final destinations. (Russia, Syria, Iran)

Billionaire(s) murdered [187]?
🦉
Read 80 tweets
Profile picture
#Guccifer 2.0’s American Fingerprints Reveal An Operation Made In The USA

disobedientmedia.com/2018/05/guccif…
#Forensicator has found some incredible evidence in his final segment of findings

theforensicator.wordpress.com/guccifer-2s-we…
The Forensicator’s earlier findings stated that Guccifer 2.0’s NGP-VAN files were accessed locally on the East Coast, and in another analysis they suggested that a file published by Guccifer 2.0 was created in the Central time zone of the United States.

theforensicator.wordpress.com/cf-files-metad…
Read 23 tweets
Profile picture
Brand new analysis on the work of the Forensicator.

Examines the DNC's self-own on their claims of hacking, which were contradicted by an 'anonymous DNC official' quoted by the Associated Press in Nov '17.

disobedientmedia.com/2018/05/the-da…
This article discusses the DNC's refutation of their own narrative on Russian hacking.

Turns out the document we were all told had "Russian fingerprints" on it did not come from the DNC emails, but from the Podesta email collection.
Crowdstrike's Shawn Henry - previously of the FBI - told WaPo that it was the theft of the Trump Oppo doc which set of the alarms that the DNC had been breached. This is huge, because that doc was attached to one of John Podesta's emails.

archive.is/IptJH#selectio…
Read 13 tweets

Trending hashtags

#AEI #Trump #USSSstrike #PANIC #HappyNewYear #QanonSaysNoDeals #Keyword #StéphaneFratacci #DNC #OsamaBinLaden #UN #Reform #Russianhack #BrunoRogePetit #LesBleus2018 #AccidentsWillHappen #PetitsSoldatsDuMacronisme #Christmas #LesBarbouzesDeMacron #BFMTV #OpKavanaugh #espionage #NGPVan #GérardCollomb #DNChack

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!