Jackie Singh Profile picture
Jul 10 18 tweets 6 min read Read on X
I am reviewing this alleged hack of The Heritage Foundation.

I have identified very embarrassing data within this dataset. Why so many Chinese IP addresses? 🤔
The zipped file contains one single file:

"daily-signal_dev_database_new.sql"

This appears to be a combined set of exports from a SQL database. Here are the first lines Image
Because this is a combined export (likely from the command line) of various tables, the file is not readable by a typical SQL editor, and needs to be split into pieces to make it so.

I'd rather just turn it into CSV chunks to start cleaning up the dataset for further analysis
There are 215,000 lines or so in the WordPress Comments table. As you can see, comment_author_IP is available, which is broadly useful to get a sense of where people posting replies to the Heritage blog are coming from in the world.

Earliest date: 2008-01-04. Newest: 2022-11-09 Image
After creating a CSV chunk with only the WP comments table, now I can view columns and extract their content as needed. After extracting IP addresses from the author column, I can eliminate duplicates and work on analyzing their presumed geo origin, which is of interest to me Image
Dataset was a little dirty and a hassle to clean up.

Here are the 60K extracted IPs from the WP Comments table:

#HeritageFoundation defuse.ca/b/PTrmvlbs
Image
Sample geolocations from the first 100 IPs (these are sorted 'low to high', and many Asia-based netblocks start with the number 1) Image
Here are the 69.5K email addresses present within the complete dataset:



🤔 235 .mil and .gov email addresses
🤔 95 .ru and .cn email addresses

#HeritageFoundationdefuse.ca/b/mLXCi0iXsGFj…
Linked below is a statistical breakdown of the domain names associated with all email addresses in the dataset.

Stacking and counting are basic analytical tools which can help analysts identify outliers.

defuse.ca/b/GMCj2uAfvELn…
Image
I have a script running to grab geolocation information and will tweet when it finishes.

Those working at big companies with access to certain commercial tools can do this more quickly than I can.
Because the original host took the file down, you can now find it here:

This is a 368 MB .zip file which uncompresses to a single 1.94 GB flat file.

SHA256: 3dcc258331d9139a654402d20b756b57ca17228aa9e2f80a4b6451b96c8eac70tan-medieval-hornet-252.mypinata.cloud/ipfs/QmVwiYsr4…
The hacker group claiming responsibility for this action has released new information on their Telegram channel. Image
Here is the list of Administrators.

defuse.ca/b/ely6s7iwqpLF…
BREAKING: SiegedSec claims to have officially disbanded.

#HeritageFoundation
Image
Image
@CloudsEdgeArt1 I am the first person covering this.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Jackie Singh

Jackie Singh Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @HackingButLegal

Nov 2
I've been developing a news analysis tool. Want to see what it can do? 😉 Ignore the numerical score for now.

Analysis: "Social media star Peanut the Squirrel has been euthanized after being seized from NY home"

The USA TODAY article covering the euthanization of Peanut the Squirrel presents as straightforward news reporting, but reveals concerning patterns when examined in depth.

The analysis indicates the article may inadvertently serve as a vehicle for state enforcement messaging, with a final risk score of 924 (High-Moderate Risk) after reliability adjustments.

The article's framing demonstrates several critical issues:

1. Selective Context: While the article mentions the bite incident that precipitated euthanization, it omits crucial context about:
- The animal's long-term health history
- The absence of prior rabies symptoms
- The owner's demonstrated animal care expertise
- Alternative testing or quarantine options

2. Authority Perspective Dominance: The narrative heavily centers official justifications while providing limited scrutiny of:
- The necessity for immediate euthanization
- The decision to euthanize both animals simultaneously
- The timing of enforcement action against a high-profile social media pet
- The relationship between viral status and enforcement priorities

3. Enforcement Pattern Indicators: Several elements suggest potential use of public health protocols as an enforcement tool:
- Timing of the seizure
- Immediate move to euthanization
- Targeting of both animals
- Use of rabies testing justification despite no prior symptoms

Public Interest Implications
The case raises significant public interest concerns regarding:
- Use of administrative powers
- Wildlife pet enforcement strategies
- Social media influence on enforcement
- Public health protocol application

Critical Omissions
The article's reliability is significantly impacted by failure to address:
1. Alternative testing options
2. Standard protocols for suspected rabies cases
3. Pattern of enforcement against social media pets
4. Prior relationship between authorities and the sanctuary

Propaganda Elements
State propaganda elements score highly due to:
- Uncritical presentation of authority justifications
- Emphasis on deterrence messaging
- Selective information presentation
- Use of public health concerns to justify immediate action

Broader Context
The analysis reveals potential patterns in wildlife regulation enforcement:
1. Higher scrutiny of visible social media cases
2. Use of public health protocols as enforcement mechanisms
3. Immediate euthanization as deterrent strategy
4. Limited consideration of alternative solutions

Public Interest vs. Authority Narrative
The article demonstrates tension between:
- Public health protection claims
- Enforcement agenda execution
- Social media influence on enforcement
- Animal welfare considerations

Conclusion
While presenting as straightforward news reporting, the article reveals concerning patterns in wildlife regulation enforcement and raises questions about the use of public health protocols as enforcement tools. The high-moderate risk assessment reflects significant concerns about narrative framing and potential state agenda, despite the article's apparent neutrality.

The analysis suggests readers should approach the official narrative with skepticism and consider broader patterns of enforcement, particularly regarding high-profile social media pets. The case may represent a larger trend of using public health protocols as enforcement mechanisms against wildlife pets, regardless of their care conditions or history.

Recommendations for Readers
1. Question the necessity of immediate euthanization
2. Consider broader enforcement patterns
3. Examine the relationship between social media visibility and enforcement
4. Research similar cases and outcomes
5. Consider alternative testing protocols

Areas for Further Investigation
1. Pattern of enforcement actions against viral pet accounts
2. Alternative rabies testing protocols
3. Standard quarantine procedures
4. History of department's enforcement strategies
5. Relationship between social media visibility and enforcement priorities

Source: usatoday.com/story/news/nat…Image
Core Ethics Breached:
cm.usatoday.com/ethical-conduct

❌ Truth & Thoroughness
- Didn't question why both animals needed immediate euthanization
- Failed to verify necessity of killing vs quarantine
- No expert input on rabies testing alternatives
- No investigation of bite incident details
- Omitted crucial context about animals' health histories

❌ Watchdog Function
- Accepted authority narrative without scrutiny
- Failed to question timing of seizure
- No investigation of enforcement patterns
- Didn't challenge simultaneous euthanization justification
- Ignored red flags about possible ulterior motives

❌ Balance & Fair Play
- Over-relied on authority sources
- Under-represented sanctuary owner's expertise
- No veterinary/wildlife expert perspectives
- Failed to explore standard protocols
- Didn't question why both animals were targeted

❌ Independence
- Functioned more as authority mouthpiece than independent press
- Amplified deterrence message uncritically
- Failed to maintain skeptical distance from official narrative
- Didn't question enforcement timing vs social media status

Bottom Line: Paper essentially served as uncritical platform for authority action rather than fulfilling journalistic duty to investigate and question government power exercise. Classic case of "stenography journalism" rather than watchdog reporting.

Key Question Ignored: Why euthanize both animals immediately when neither showed rabies symptoms and one wasn't even involved in alleged bite?
R.I.P. Little buddies. You deserved better.
Read 5 tweets
Sep 24
When these spies travel to another country and need to become established, they must work to build their 'legend'–A convincing backstory.

One of the handiest ways to do this and make relationships in the local community is Meetup.

> On the left: The guy in the thread below
> On the right: The lying troll @/cafrozed who submitted fake evidence in the torswats case to @seminolesheriff @SeminoleSO @FBI @WIRED.

His real name isn't Brad Dennis, and his real job isn't Private Investigator 🤡

1/Image
Image
2/ His name is actually Michael O'Leary and he holds a top secret TS/SCI security clearance bc he works in skunkworks (highly classified projects) for government contractors in the aerospace and weapons industry.

@DeptofDefense @RaytheonDefen__ @RTX_News This guy appears to be a mole FYI, linked to Seattle in public record and lots of inconsistencies.

Lying to/working with the press ( ) to obscure true evidence regarding a matter of national security (nationwide SWATTING attacks on POLITICIANS) while using a covert identity.

wired.com/story/torswats…
linkedin.com/in/mfolearyImage
Image
Image
3/ O'Leary's wife is Brittany, an elementary school teacher. They have two young children together. O'Leary (and his father) can each be found in public record with connections to Seattle, Texas, and other locales.

It is very important for federal investigators to review the following photography company (), which is being used to establish legends, whether knowingly or unknowingly.

As an example, one woman pictured at the O'Leary wedding also had her own wedding which is shown on the website–to a man who joined the US Air Force's 301st Fighter Wing (TX) in 2016. This is why the website describes him as temporarily living apart from his fiance in Utah when some of the couple's photos were taken.

Many other individuals in their orbit work in air/space and maritime.archive.ph/vqUXV
Read 10 tweets
Sep 24
Oh, I see why. 🤡 Another Russian illegal.

1. Here's the guy's biometric match: a cached profile pic from a VK domain: (Source: ) - Try changing the URL parameters to get the Russian error message.

2. Here he is again as a sheep in wolf's clothing at a @Y_P_I event in Providence, RI around roughly June 2022. (Source: )

3. Third image: His avatar from Spoutible.

Fuck you, Putin! 🖕 CC: @DOJNatSec @FBIsun1-54.userapi.com/s/v1/if1/BBv0c…
myemail.constantcontact.com/YPI-Summer-New…Image
Image
Image
He's scared now? Good. The jig's up. Get the FUCK out of my country.
Image
Image
These millions of views I rack up produce NO MONEY. I haven't given Elon ID and I don't get payouts.

Try again 🤡

Read 10 tweets
Sep 21
So it seems that Musk did gift some Cybertrucks to Putin's Chechen warlord Kadyrov, but when the news got out was forced to remotely disable them lest he be arrested for an intentional sanctions violation.

1/ One more piece of important evidence ⬇️

edition.cnn.com/2024/09/20/bus…
2/ Yes, Elon, we really do think you're poorly intentioned and colluding with enemies of America. It's very easy to believe based on everything else you've done.

3/ If you had any doubt remaining, here is Russian state media (Putin) acting as Musk's PR 🤡 Image
Read 8 tweets
Sep 19
1/🧵 Russia's Information Warfare: What is it?

The Kremlin uses disinformation as a tool to manipulate events & erode trust beyond its goal of influencing public opinion. It aims to achieve political goals (chiefly, Putin's revanchist fantasies) through intricate information warfare strategies. 🕵️‍♀️💻

👀 Their tactics are diverse, & constantly evolving:

Amplified Propaganda: Spreading biased or false narratives via traditional media & online channels (bots, paid influencers) - often targeting specific political agendas. 💥🌎
Information Warfare Operations: Disrupting information flows to influence public opinion on crucial issues like elections and international conflicts. 💣

This thread discusses a few of these tactics and explores the impact of Russian hybrid warfare strategies on global politics.

Let's go! 🌍➡️🤓
2/🧵 Create ‘Information Bubbles’, Amplify Narratives 🫧📢

Concept: This involves targeting specific audiences with tailored information to solidify their pre-existing biases or prejudices, creating echo chambers that limit exposure to opposing viewpoints. This can be achieved through carefully crafted online content and propaganda campaigns on social media platforms using algorithms designed for targeted advertising ("Information Bubbles", "Propagande Media").

Sample methods include:
- Using fake accounts or bots on Twitter, Facebook, Telegram, etc. to sow discord by spreading disinformation.
- Provocative online articles and analyses targeting one or more specific demographic(s) with inflammatory/hateful rhetoric.

Historical Example: In 2014's early stages of the Ukrainian crisis, Russia employed a multifaceted information warfare strategy, using targeted social media campaigns on platforms favored by anti-Western or nationalist audiences while leveraging pro-Russian propaganda channels like RT. A deliberate operation aimed at weakening Ukrainian civil society and media outlets was undertaken to spread disinfo about government actions in Ukraine.

"Ukrainian territories that Russia unlawfully occupies have served as a testing ground for the Kremlin’s information operations and provide us with a glimpse into its present and future propaganda tactics."
–@AIIANational

Source: internationalaffairs.org.au/australianoutl…
3/🧵 Fabricate Evidence, Spread Lies 📰🙈

Concept: This technique employs fabricated narratives that are then disseminated through various channels—social media, news outlets, websites, academic publications (sometimes even international organizations) to gain public support for desired policies or agendas and damage the opposing side's credibility. It can involve fabricating stories about their opponents' actions or motives.

Sample methods include:
- Creating fabricated images or videos of events that never happened. ("Fabricated Evidence", "Propaganda with False Information").
- Distorting or manipulating data to create false narratives, often used in scientific fields like climate change (“Fake Science”)

Historical Example: The Syrian Chemical Attack incident in 2013 exemplifies how Russia has weaponized disinformation for strategic advantage. Though not directly orchestrated by Russia, it benefited from their amplification via pro-Kremlin media channels like RT and other outlets aligned with Russian interests. Unsubstantiated claims of Syrian rebels using chemical weapons were intertwined with other disinfo campaigns to undermine international efforts (like the UN) to seek accountability.

"Despite successful multilateral cooperation at in 2015, the Russian Federation and its disinformation and propaganda ecosystem continued to portray the United States and the West as being roadblocks to the full success of Syrian peace talks."
–@StateDept

Source: state.gov/wp-content/upl…
Read 10 tweets
Sep 16
🚨 Trump's would-be assassin, Ryan Wesley Routh?

His Facebook + website indicate he's been working an active psyop campaign on behalf of Russia to recruit volunteers for Ukraine.

I invite those with Ukraine-specific knowledge to examine the website:

1/ fightforukraine.com.ua


Image
Image
Image
2/ There are many signals in the text indicating that the website and his operation were a psyop.

The goal right now will be to paint him as a supporter of Ukraine. However, I will demonstrate why we should be very suspicious of this narrative, which Rouch worked hard to seed.
3/ Here he is running a similar psyop for the CCP.

taiwanforeignlegion.com/what-we-are-do…
Image
Read 17 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(