diff --git a/src/posts/2024-in-review.md b/src/posts/2024-in-review.md index e0aa99d..e7830f6 100644 --- a/src/posts/2024-in-review.md +++ b/src/posts/2024-in-review.md @@ -24,7 +24,7 @@ the end of the year is fast approaching and everyone is busy preparing for the h ## 8: hack of the year: *The Real World leak* ![an unflattering photo of andrew tate cut out and put in front of a screenshot of a selection of trans and womens liberation themed emojis in an emoji picker](/img/posts/2024-in-review/therealworld.jpg) -in november, Andrew Tate's online university—called *The Real World*—[was hacked](https://www.dailydot.com/debug/andrew-tate-the-real-world-hack/) and had all chat logs leaked ([1](https://ddosecrets.com/article/andrew-tate-s-the-real-world), [2](https://ddosecrets.com/article/andrew-tate-staff-chats), [3](https://ddosecrets.com/article/andrew-tate-s-war-room-videos)). i have yet to publish my own analysis of the data (though i have been working on that), but in the meantime you can easily [search through the data yourself](https://search.ddosecrets.com/data/revolt/server/2bc384ec-5ec3-4170-8405-eebf8362f68e), courtesy of [DDoSecrets](https://ddosecrets.com). absolutely baller move. +in november, Andrew Tate's online university—called *The Real World*—[was hacked](https://www.dailydot.com/debug/andrew-tate-the-real-world-hack/) and had all chat logs leaked ([1](https://ddosecrets.org/article/andrew-tate-s-the-real-world), [2](https://ddosecrets.org/article/andrew-tate-staff-chats), [3](https://ddosecrets.org/article/andrew-tate-s-war-room-videos)). i have yet to publish my own analysis of the data (though i have been working on that), but in the meantime you can easily [search through the data yourself](https://search.ddosecrets.org/data/revolt/server/2bc384ec-5ec3-4170-8405-eebf8362f68e), courtesy of [DDoSecrets](https://ddosecrets.org). absolutely baller move. ## 7: Hackers (1995) of the year: *Hackers (1995)* ![the original cover for hackers (1995) the characters are in the middle of the cover, above them is text saying "their only crime was curiosity" and below them is the title of the film](/img/posts/2024-in-review/hackers1995.jpg) @@ -49,7 +49,7 @@ i spent most of the first half of this year researching this shady conglomerate ## 3: stalkerware hack of the year: *mSpy helpdesk leak* ![a glitchy edited promo photo for mSpy](/img/posts/fuckstalkerware-7/cover.jpg) -in june, an anonymous hacker breached a helpdesk belonging to mSpy, one of the biggest stalkeware vendors in the world, and leaked the data [to me](https://maia.crimew.gay/posts/fuckstalkerware-7/) and [DDoSecrets](https://ddosecrets.com/wiki/MSpy). this has proven to be one of the most useful stalkerware datasets yet, and after i wrote my own surface level [writeup](https://maia.crimew.gay/posts/fuckstalkerware-7/) on it i have since helped various other outlets with reporting based on the data: [crikey](https://www.crikey.com.au/2024/07/02/stalkerware-australian-politicians-police/) covered mSpy's use in australia, [reason](https://reason.com/2024/07/02/federal-judge-ice-agents-linked-to-compromised-spyware-use/) covered its use in the US, [radio free europe/radio liberty](https://www.currenttime.tv/a/rossiya-prilozhenie-mspy/33050441.html) covered its use in ukraine and russia, and republik covered its use in switzerland ([part 1](https://www.republik.ch/2024/11/19/mit-dieser-app-weiss-ihr-partner-alles-ueber-sie), [part 2](https://www.republik.ch/2024/11/20/wenn-der-kundendienst-bei-der-straftat-hilft)). more articles are still being worked on. +in june, an anonymous hacker breached a helpdesk belonging to mSpy, one of the biggest stalkeware vendors in the world, and leaked the data [to me](https://maia.crimew.gay/posts/fuckstalkerware-7/) and [DDoSecrets](https://ddosecrets.org/wiki/MSpy). this has proven to be one of the most useful stalkerware datasets yet, and after i wrote my own surface level [writeup](https://maia.crimew.gay/posts/fuckstalkerware-7/) on it i have since helped various other outlets with reporting based on the data: [crikey](https://www.crikey.com.au/2024/07/02/stalkerware-australian-politicians-police/) covered mSpy's use in australia, [reason](https://reason.com/2024/07/02/federal-judge-ice-agents-linked-to-compromised-spyware-use/) covered its use in the US, [radio free europe/radio liberty](https://www.currenttime.tv/a/rossiya-prilozhenie-mspy/33050441.html) covered its use in ukraine and russia, and republik covered its use in switzerland ([part 1](https://www.republik.ch/2024/11/19/mit-dieser-app-weiss-ihr-partner-alles-ueber-sie), [part 2](https://www.republik.ch/2024/11/20/wenn-der-kundendienst-bei-der-straftat-hilft)). more articles are still being worked on. ## 2: movie i haven't watched yet but really want to of the year: *I Saw the TV Glow* ![banner for "i saw the tv glow" it features the film logo on the left and a person looking into a pink glowing crt screen on the right](/img/posts/2024-in-review/tvglow.jpg) diff --git a/src/posts/fckice.md b/src/posts/fckice.md index 8de8293..ca04654 100644 --- a/src/posts/fckice.md +++ b/src/posts/fckice.md @@ -23,7 +23,7 @@ tags: * ***Note:** This is data from 2021 and may be partially outdated.* * **Type:** leak archive * **Size:** 1.8M -* **Description:** Information on about 20k alleged FBI employees. Its source is difficult to discern (likely from [BlueLeaks]()), but we were able to verify through OSINT that the data is likely legitimate. +* **Description:** Information on about 20k alleged FBI employees. Its source is difficult to discern (likely from [BlueLeaks]()), but we were able to verify through OSINT that the data is likely legitimate. * **Download:** [fbi.txt](/files/posts/fckice/fbi.txt) ### LAPD citywide and central radio recordings for June 7 and June 8 @@ -65,12 +65,12 @@ tags: ### Filtered The Post Millenial data * **Type:** filtered leak * **Size:** 52K -* **Description:** Personal information from [The Post Millenial leak](https://ddosecrets.com/article/psyclone-media) as it pertains to ICE and DHS employees. +* **Description:** Personal information from [The Post Millenial leak](https://ddosecrets.org/article/psyclone-media) as it pertains to ICE and DHS employees. * **Download:** [fckice.txt](/files/posts/fckice/fckice.txt) ### ICEPatrol/ICWatch LinkedIn Scrapes * **Type:** scrape * **Description:** 2018 and 2021 scrapes of LinkedIn for ICE and Intelligence Community employees, originally published by WikiLeaks. -* **Download:** [ICEPatrol](/files/posts/fckice/ice-linkedin.7z) / [ICWatch (via DDoSecrets mirror)](https://data.ddosecrets.com/WikiLeaks%20Archive/icwatch/) +* **Download:** [ICEPatrol](/files/posts/fckice/ice-linkedin.7z) / [ICWatch (via DDoSecrets mirror)](https://data.ddosecrets.org/WikiLeaks%20Archive/icwatch/) To the public's knowledge, a hacktivist support or attack front is not yet present during this spurt of protests, which is rather unusual for something of its size. If you still have other data to add (insider, leak, or archive), you can reach out to either [maia](/contact) (signal: @nyancrimew.01) or ryan (signal: @rhinozz.1337) directly. We promise anonymity and general source protection. \ No newline at end of file diff --git a/src/posts/fuckstalkerware-2.md b/src/posts/fuckstalkerware-2.md index 33fb829..3bdfc26 100644 --- a/src/posts/fuckstalkerware-2.md +++ b/src/posts/fuckstalkerware-2.md @@ -117,7 +117,7 @@ i dont think ive ever seen a product ad that was as over the top and as 2013-min on the evening of sunday the 23rd i noticed that i could no longer sign into my testing account at spyhide, it appears that virsis has "responded to my request for comment" by closing up at least some of the holes. sign ups were disabled (except i think through the app ?), some database password were changed, my webshell removed and my account deleted. a quick check with goop shows that .git is still exposed and nothing else (including the arbitrary file upload) has been fixed. -the data from this leak will be available soon in limited distribution to other journalists and researchers via [DDoSecrets](https://ddosecrets.com) (please [support them financially](https://ddosecrets.charity)), this article will be updated to reflect that once that is the case. as always feel free to [contact](/contact) me with any tips, data, vulnerabilities, industry insider info (for this series and just in general) or for journalistic inquiries. +the data from this leak will be available soon in limited distribution to other journalists and researchers via [DDoSecrets](https://ddosecrets.org) (please [support them financially](https://ddosecrets.charity)), this article will be updated to reflect that once that is the case. as always feel free to [contact](/contact) me with any tips, data, vulnerabilities, industry insider info (for this series and just in general) or for journalistic inquiries. ## updates diff --git a/src/posts/fuckstalkerware-7.md b/src/posts/fuckstalkerware-7.md index 3f33d61..04eda9e 100644 --- a/src/posts/fuckstalkerware-7.md +++ b/src/posts/fuckstalkerware-7.md @@ -18,7 +18,7 @@ content_warnings: - mentions of abuse/controlling behaviour --- -*update: the data this reporting is based on is now available [via DDoSecrets](https://ddosecrets.com/wiki/MSpy) for secondary reporting, journalists interested in quotes or reproducing my research can [reach out to me](/contact)* +*update: the data this reporting is based on is now available [via DDoSecrets](https://ddosecrets.org/wiki/MSpy) for secondary reporting, journalists interested in quotes or reproducing my research can [reach out to me](/contact)* most stalkerware reporting focuses on private use by abusers, stalkers or parents, and it makes sense—besides monitoring employees, those tend to be the main people stalkerware companies advertise to, and the ever-increasing normalization of surveillance is an important social issue to shed a light on. but it's always been clear, at least in theory, that this hyperavailability of relatively cheap commercial spyware also enables completely different use-cases, be it [as part of fraud schemes](/posts/wyndham-defrauded/) or even by governments. during [every stalkerware leak i've analyzed so far](/posts/tagged/fuckstalkerware/), i've always been on the lookout for the latter, and in a lot of my articles i report on government employees i've found in the databases, but so far it has always been for either private or unclear use. thanks to an anonymous source who provided me with a complete dump of the mSpy helpdesk a week ago, however, this all changes today. diff --git a/src/posts/how-to-hack-an-airline.md b/src/posts/how-to-hack-an-airline.md index f032695..93bf922 100644 --- a/src/posts/how-to-hack-an-airline.md +++ b/src/posts/how-to-hack-an-airline.md @@ -66,4 +66,4 @@ i had owned them completely in less than a day, with pretty much no skill requir ## so what happens next with the nofly data -while the nature of this information is sensitive, i believe it is in the public interest for this list to be made available to journalists and human rights organizations. if you are a journalist, researcher, or other party with legitimate interest, the data is available for access (upon request) [via DDoSecrets](https://ddosecrets.com/wiki/No_Fly_List). \ No newline at end of file +while the nature of this information is sensitive, i believe it is in the public interest for this list to be made available to journalists and human rights organizations. if you are a journalist, researcher, or other party with legitimate interest, the data is available for access (upon request) [via DDoSecrets](https://ddosecrets.org/wiki/No_Fly_List). \ No newline at end of file diff --git a/src/static/posts/how-to-hack-an-airIine/index.html b/src/static/posts/how-to-hack-an-airIine/index.html index e0c7334..22fea87 100644 --- a/src/static/posts/how-to-hack-an-airIine/index.html +++ b/src/static/posts/how-to-hack-an-airIine/index.html @@ -360,7 +360,7 @@

while the nature of this information is sensitive, i believe it is in the public interest for this list to be made available to journalists and human rights organizations. if you are a journalist, researcher, or other party with legitimate interest, the data is available for access (upon request) via DDoSecrets.

+ rel=noreferrer target=_blank href=https://ddosecrets.org/wiki/No_Fly_List>via DDoSecrets.