Snapshot done. Turning on now.

thanks

@all https://twitter.com/CVAgainstFash/status/1470990772723933186?s=20

Frederick OR dox

There's no screenshots from rocketchat in the dox

"Patriot Front members stranded due to Lawrence’s incompetence."

Did Frederick OR drive one of the box trucks?

pretty sure he did

Were the box truck attackers filming?

probably

John WA mentioned Frederick OR would drive box truck during a nw meeting, nvm.

Any other pieces of useful information?

Not that I can see.

How do they prove that he's a member?

Pics from a hike taken by Vincent WA

https://archive.ph/hi6p3

archive of the dox

Very sloppy tbh

Have we checked the Mumble logs from the PNW meeting for VPN's, fake accounts, etc.? Can we do that?

@Vincent TX ^

https://pastebin.com/Mvw6zATd this can also be reported most likely

https://pastebin.com/report-abuse

@Matthew MN Why do you say it's sloppy?

Their picture of him isn’t really in uniform and the only way they relate him to patriot front is through his hair

Leaves some room for deniability

@Thomas can you revert the new test server back to the snapshot?

@Jake AR Yes.

Restoring now.

Thanks

@all Important tasks for immediate assignment

1. Creation of multiple mumble "Timekeeper" bots that will emanate an inaudible frequency that is reflective of the current time in each room. These bots will ensure that any recordings of meetings or interactions on the mumble server that are recorded will become either useless or immediately point to an infiltrator upon release of recording.

2. Creation and dissemination of a memo that is discrete watermarked, unique to each user, with false information about an upcoming march. This memo will be sent to all members within a previously infiltrated area.

Who can start owning these tasks? These will be some of our first proactive measures as we start to take an offensive on our security.

Audio Plugin Bot Information
https://mumble-ruby-pluginbot.readthedocs.io/en/master/

It looks like the easiest way to do it would be to create an unlisted 24 youtube video and have a bot for each room that plays that video. Starting at 00:00.

That would work

If we do an inaudible frequency we can probably pick it out

Who has audio software that can test this theory? Confirmation would include:
1. Working audio file that can be uploaded to youtube
2. Inaudible to the human ear
3. Clearly visible when looking at a spectrum analyzer or other software

These things have to be confirmed before we start.

I'm not getting how the frequency would tell us who the infiltrator is in a certain recording

The frequency would be unique based on the time of day

@Vincent TX Re. the Memo. We have never released a "memo" before to my knowledge. I like the idea, but I think they will figure that one out quick right?

Might help a little bit but I don't see how it would indicate who the infiltrator is, could be anybody in the room at the time.

Perhaps, but they are also thinking we are stupid and take every opportunity to mock us. It's possible they get bloodlust and forget about it.

It gives us another piece of information to work with that we do not have.

They likely would just screenshot the memo and then the watermark is gone right? You might want to use slightly different content to each person.

Just do different emojis

A valid consideration

Then you could not release a memo, they would just screenshot the content from RC and leak it like norma..

:PF-Flag: :PF-White: ANNOUNCEMENT :PF-Red: :pfwhite:
for one guy ^
:PF-Red: :PF-White: ANNOUNCEMENT :PF-Red: :pfwhite:
for next guy ^

and so on

It would be in a downloaded file

An actual document

We are trying to avoid the idea of screenshots since they are including them less and less

Distribute it as an image

The point is to include fake information about the next demo, as to induce a sort of excitement and "gotcha" moment for them.

An image would work too

I don't think they'll say anything publicly about getting info about an upcoming demo. I think they'd distribute to local antifa and start having people get plane tickets out there on the day so they can attack us in person.

Good, make them waste money, we won't be going there.

This is partially why we need an inside with their comms

We could get this information without a leak actually happening publicly

In my opinion the best bait for them would be an undistinguishable replica of #announcements but only west coast members can see it, and an announcement from Thomas saying "The infiltrators have absolutely been removed" with slightly different emojis for every unique viewer.

Not possible

But, as Thomas mentioned before, it'd be embarrassing when leaked.

It is def possible

Personally, I think they wouldn't fall for downloading a file or image and releasing it exactly as posted. They will download it and then screenshot it and then the watermark is gone. That would prove we have an infiltrator still though. Changing the content is probably going to be more reliable, I like the change in emoji's idea, that is subtle enough. Maybe just another juicy announcement from Thomas about the security of our servers or something that will bait them.

If its an image the watermark will stay with the image

It's embedded

Even with a phone quality screenshot?

It's part of the image itself, something that when you up the contrast of the image to 100% for example you can see it

The message could be uniquely phrased or have a unique typo

That is fine too

"They can't even spell correctly"

Will see what Thomas thinks about that when he gets up. He will likely take charge of that one anyways.

In the meantime, let's focus on this mumble bot

I vote for rocketchat announcement with different emoji combo for each person using js script over the image idea

That would be difficult do it in each regional channel perhaps

We need to keep a record of which version of the message is sent where

We could narrow it down to a region

I think Jake and I could figure it out, but if not it could be a nationwide announcement. With content less embarrassing than "I promise we've found all infiltrators" but still juicy enough for them to post.

That is not as immediately pressing as mumble. We need to secure our comms properly.

So let's revisit it once we have decided on the mumble work.

Re. the mumble bot. I have a question about that. So it sends a tone on the channels that we can then find out the time of the recording. But that doesn't help us determine who recorded it right? Just when it was recorded?

Each room will have it's own "Timekeeper" that will all play unique frequencies depending on the time of day. IE Room 1 bot is emitting 125khz at 13:00. If a recording is leaked we check the frequency. It will help us know the exact time the recording took place. Previously we didn't have the information except by people remembering when someone said what.

It is mostly just an additional piece of information for us to work with, I know it would have helped us here. But it will narrow the suspects down. The key is to have as many tools as possible to narrow it down.

Ok, so that is a good start. I think to be more useful we would log who connects to mumble when. You could narrow it down when the recording starts / stops then. Not sure where that info could be stored though and it may need to be maintained for a long time because sometimes these leaks come out months later. But I don't see a problem just logging who logged in, when they logged in and maybe what rooms they moved between. Not IP's and other identifying info.

@Vincent TX Check of "Nicholas UT" has the Temp_logs role on here

I just came across a log that said as much

which makes no sense

His title is Resist or cease to exist too...

Yeah he has temp logs

He doesnt even has user?

Not. Good.

He was added on the 12th

We need to figure out how that happened asap

I see a Nicholas UT in the Directory.

I deactivated

Likely Thomas fat fingered but idk

Okay, well, if Nicholas UT figured out that he had such role he would've been able to see every message sent in every channel since whenever he was given the role

among other things

December 12th

:man_facepalming_light_skin_tone:

Let me ask John if he was vetted or anything

What was his number Thomas can check for interview notes. We should probably audit who has what roles right now.