I can look into it further but the address of an IP he connected with is more solid

Someone with a twitter account check the following and likes on this:

[REDACTED]

and also tell me if that looks like him to you

[REDACTED] is old marine, had a daughter in 1998.

I think it might be a little too old

Not him.

Yeah not surprising

I believe [REDACTED] is the son of [REDACTED] and [REDACTED], so I'm looking at him now

Someone with a linkedin account please view [REDACTED]

Lmk if it's from washington and working a tech job, and any other info

@Vincent TX [REDACTED] lives in the house which the IP is registered to. He is working as a software developer for [REDACTED] in Seattle. Thoughts?

I can't seem to find a pic of him unfortunately.

Could possibly be linked but he said he was a web developer

In the NPR article

He said he worked in marketing to members. Infiltrators sometimes mix lies in with true details when constructing and identity.

Here is a [REDACTED] from WA: [REDACTED]

any pics?

6 years ago

Kinda doubt.

Too young imo

Agreed unless he got super heavy into drugs or something

Any tattoos on the infiltrator?

I don’t recall that being mentioned. Ask John, though he might have always worn long sleeves too.

No visible tats

How do we get to the possible name of [REDACTED]?

I think I have his last name already

[REDACTED]

Mother pososibly [REDACTED]

With [REDACTED] in Pugent Sound

https://www.npr.org/2020/07/23/893533916/i-am-antifa-one-activist-s-violent-death-became-a-symbol-for-the-right-and-left

LOL, I see how that name was developed. Is that for sure him right?

I mean, it is his telegram name, confirmed it in a web marketing forum as well so I know its him

Then tied [REDACTED] to his mommy

This is where he accessed mumble from before. Residential address [REDACTED]

Yes

Before or after the March

He is deactivated. Be on the lookout for new info in the next 24 hours

Especially Atlanta Antifa and Miami Against Fascism

I assume Paul was not at Philadelphia

Victory is rekeyed

I can share the keypair to whoever needs it

Thank you Matt

If there is anything else I can get done tonight just let me know.

For logging image downloads it looks like it does a special request compared to loading the page.

Matthew look at the list and see if there is anything else that sticks out to you

https://twitter.com/RoseCityAntifa/status/1468804568746131462?s=20

Leo OR

The fact it took them 2-3 days to publish the dox suggests they might not have too much at the ready perhaps

John is already on it

Was likely collecting right up until the end. Lots of raw info needing to be parsed.

They likely weren't expecting to be compromise when they were.

"throughout the course of a single day in the aforementioned Proud Boy Telegram chat, Knuteson used the n-word 24 times."

There is a segment in this dox where they claim he operates a twitter account where he doxxes proud boys over some dispute about a woman.

@Jason NY @Matthew MN Nothing in the dox violates our existing theory about the infiltration?

I am going to compute some of the values

But it lines up with Vincent

I saw nothing other than them saying "ongoing infiltration of Patriot Front chapters" which I don't necessarily believe

Hashes compute Vincent WA

All?

just a few

Nothing from before Vincent WA

Who deactivated Paul FL and why? I need to know when that happens, and who can do it.

Vincent deactivated him because he was caught w/ a phone when he wasn't supposed to have one, refused to give it back at first and squared up to Lawrence FL. Jeff NY and Wayne NY said he was acting very odd.

Doesn't seem to fit any other of our criteria in the investigation, does he? I believe this is a personal conduct matter that Lawrence can handle under the purview of his Directorial position. If that is all there is to it.

Fits some of the criteria imo. Had phone access when he shouldn't have and was acting suspicious.

Personally I don't see why a normal member would try to sneak his phone past our security

Will confer with Lawrence.

Maybe he can be revetted.

I have been cross referencing the members who attended NJP, had knowledge of John WA's meeting, and had access to their phones en route to the vehicle exchange. So far the only people to tick all 3 lists are Samuel VA and Patrick TX.

Thinking maybe the John WA meeting is less relevant than assumed. I don't see it outside of the realm of possibility that the infil simply connected to mumble at random, or assumed there would be a meeting some time that night.

They always happen at the same time, I imagine.

Likely. Also, if the meeting happened on the day the WA members returned, the infil would know to check on that night. Since he knew flight times.

I will color code members who tick all 3 lists in red, and members who tick 2 lists in orange.

Thank you.

Think we should have another look at Frederick.

John WA says he knows everything about Frederick. Full name, been to his house, etc.

Can we cross reference that info with anything?

I'll reach out to him about that

Interview server could use a temporary ram / cpu core upgrade @Michael TX

That is on my end.

Give it a few minutes.

Gotcha

@Jake AR @Michael TX do we keep the nginx logs?

I am not aware. I thought we could have but disabled them. I am not familiar with nginx

@Jake AR Can you assist us with adding a public key to the new cloned droplet?

I think we've added a public key to Thomas's account but it hasn't been applied to the droplet

We can't ssh into the droplet to change authorized_keys because we need a key to ssh in, it's like an infinite loop

So gotta add the key from the host panel somehow

@all REMINDER: No one is to delete, or deactivate an account without first informing me and getting the go-ahead. Outside of the case of extreme emergency.

Virginia boys were re-activated by me this morning upon good re-vetting of Sam

just FYI

will keep in mind going forward

Hey @Thomas @all Just FYI, trying to join the mumble meeting and it says connection refused, Max 100 users.

Working on it

Ok. :) Exact error: Reject: Server is full (max 100 users)

Guess I should have been early!