BOMBSHELL: New Report Shows Guccifer 2.0-DNC Files Were Copied Locally—Not Hacked

a reply to: jadedANDcynical

The MX records for dnc.org:

10 dnc.org.1.0001.arsmtp.com 8.19.118.110
[United States] US
APPRIVER LLC (AS53780)

20 dnc.org.2.0001.arsmtp.com 8.19.118.111
[United States] US
APPRIVER LLC (AS53780)

a reply to: BlueAjah

Both of those ip addresses are blacklisted on ipindetail:

bl.spamcannibal.org 0.0493s LISTED

Not too bad being only one on the blacklist test detail.

If someone downloaded this data through the internet, they would have to use anonymizer software or websites.

That software is going to bounce the data around routers all over the world.

I tried using a Tor browser once and it was like dial up speeds.

a reply to: facedye

I'm basing it on his own statements.

The Private Detective Who Ignited A Clinton Conspiracy Theory Says He Was Misquoted

Late Tuesday, Wheeler told BuzzFeed News he knew about possible emails linking Rich and WikiLeaks because of a FoxNews.com story by reporter Malia Zimmerman. Wheeler, who is also a Fox News contributor, said he doesn't know who her source is and hadn't personally seen any evidence suggesting that Rich leaked emails to WikiLeaks.

Wheeler told the same thing to CNN, adding that the comments he made to Fox 5 in DC were intended to promote the Fox News story.

"I only got that [information] from the reporter at Fox News," Wheeler told CNN.

I don't talk out of my ass. If I say something matter-of-factly, it's with reason.

a reply to: BlueAjah

AppRiver (email host) - the payment for Internet Services:

ITEMIZED DISBURSEMENTS Committee: DNC SERVICES CORP./DEM. NAT'L COMMITTEE
...
APPRIVER 1101 GULF BREEZE PKWY SUITE 200
Gulf Breeze, Florida 32561
09/24/2015 Internet 414.36

On the same page as Seth Rich's payments - just noting:

SETH RICH **address removed for privacy** Washington, DC 20001 09/15/2015 Salaries 1728.19

originally posted by: BlueAjah
a reply to: theantediluvian

Or... Rod Wheeler was threatened into silence.

Or... Rod Wheeler is a 10,000 year-old unicorn from Jupiter. Since we're just throwing things against the wall to see what sticks. I'll be back in a bit after I've read this "report."

I have been thinking ever since information was revealed in other threads as well as this...

I have doubts that the emails that were leaked came from the hosted email server. I think they could have been taken from pst's on the computers belonging to the DNC individuals. There seems to have been lapses in security there.

Noting the folder format in the files being investigated by the OP, note that they are not in a folder format that you would see at the top account levels on an email server. (at least according to the snips shown). The name of each .rar seems to be folder by subject, such as someone would use to organize their pst.

There are also individual files, which may indicated other files copied from a PC, or email attachments stored separately.

originally posted by: Xcathdra

originally posted by: underwerks
a reply to: Xcathdra

My internet connection is at 54 MB/s right now.

So...

Mine is around 50 however when you try to download something you wont hit 50mbs. It will drop way down to around 1mbs to about 4mbs, depending on type of connection. You wont be getting anything near 23mbs.

Im not sure how true that is. I have 100meg service, and I download stuff (music and movies) at over 70mgs all the time, over wifi.

Has anyone been able to download and unpack the file?

I keep getting data errors.

As for the download speed, I don't really think it matters. Download multiple files at the same time and they could be created/modified with seconds of each other even if it took a long time to download them.

Also, all those rar files would have been created/modified after their content had been downloaded. The times mean nothing.

originally posted by: AutonomousMeatPuppet
If someone downloaded this data through the internet, they would have to use anonymizer software or websites.

That software is going to bounce the data around routers all over the world.

I tried using a Tor browser once and it was like dial up speeds.

NOT if you are FSB and have FIBER OPTIC connects with RUSSIAN-owned TOR nodes.

a reply to: theantediluvian

i'd have to respectfully disagree with you - it looks like you're definitely talking out of your ass, and your reply substantiates this point of view.

you made some assertions that are not supported at all by what you just replied to me with.

your assertion:

Rod Wheeler didn't have any evidence tying Seth Rich to WikiLeaks.

ok - how do you know that? you haven't answered this question, and simply pointing to Malia Zimmerman is probably one of the weakest rebuttals you can make.

He was given some talking points by a Fox News reporter from a retracted story which he then went on Fox News to regurgitate, passing them off as "evidence" that he'd obtained himself until the whole fiasco fell apart and he changed his tune completely and walked everything back.

Slain DNC Staffer Had Contact With WikiLeaks, Say Multiple Sources

^^^ that's the article that was apparently "retracted." so retracted, that they still have it up on their website

so, if i am to believe you blindly, and agree that wheeler got his assertions from zimmerman, you're still shooting yourself in the foot. none of what she said has turned out to be a lie, nor disingenuous.

you have a lot of different people and organizations wanting to claim that this was a flat out lie, however nobody can support that assertion with anything tangible. you, however, are absolutely sold that wheeler just wanted some face-time on a popular news network, regardless of how badly that would destroy his credibility.

again, based on what? the fact that he backtracked on his story?

do you really think that the only reason someone would backtrack on a story like this is solely when they're caught in a bold-faced lie? there's NO other explanation for this behavior?

your comments on this just straight up look like character assassination to me.

originally posted by: DAVID64
This is looking more and more like an inside job, by someone who either was fed up with the corruption or really didn't want Hillary in the power seat. Or both. Maybe they didn't like the way Sanders was screwed and decided to do something about it. This ruins the "Russia Did It" for the Dems.
Wanna bet they and the MSM don't say one word about this?


"The FBI wants what? Tell'em I'll be there in just a minute"

[ Smiles at agents ] " Server? What server?"

Probably by someone who liked Pandas and was murdered.

originally posted by: underwerks
a reply to: Xcathdra

The most important aspect about the report is the “estimated speed of transfer (23 MB/s)” at which the documents were copied. It’s inconceivable DNC documents could have been copied at such speed from a remote location.

My internet connection is at 54 MB/s right now.

So...

MB and Mb's are different.

originally posted by: JoshuaCox
a reply to: Xcathdra

OMG I just read the article...


"A mysterious IT guy has told us...."


Really?!?


Not even an unnamed official ... lmao..


"Mysterious IT guy..."

Credible ... real credible.. lmao man that is funny..

And when both sides are guilty of it, we look at the evidence. In this case, the evidence strongly suggests that the original tale of the DNC being hacked by the Russians is false. Who is Warren Flood?

a reply to: BlueAjah

I missed adding the link for source of previous post, and too late to edit.
Source

a reply to: Xcathdra

With high probability, you are talking about 50MBit, not 50MByte. There is a difference of the factor 8 (8 bits = 1 byte).

My 50Mbits gives me 5.8MByte/sec.

a reply to: baburak

Bull#, the internet connection at my old employe was 1:1 symetric up-/downstream. Private != Business plan

So, perhaps the Forensicator is watching this thread. There are two new posts today, one on transfer speeds which includes some comparison visuals:
Bytes or Bits

and one regarding additional information on WinRAR archives and UTC timestamps:
RAR-Times-Local-Or-UTC

a reply to: BlueAjah
Keep in mind that the generation time for the archives. While you can transfer 30mb/s(that's mbit fyi), and 30MB/s over the internet, it's the archive creation speed that's interesting. There's two things that will give you >0 ms archive creations, local devices, and local devices. Even fiber optic of a few hundred miles will see 10-20ms response times. This is likely someone with access to the local disk, or a backup of that disk.

Note the conclusion in parts 1 and part 2. There's also several interesting threads going on in /g/ on several chans right now.

a reply to: PrairieShepherd

Local or UTC doesn't really make a difference. If you see the content of the rars you will see that they contain files that are months and even years old.

The two most likely scenarios are:

The files were compressed after copying or hacking and isn't evidence of one or the other

The files were archived in rar format and a batch file used to update giving date-stamps pretty close to each other. Rars no longer updated showing older dates.

I don't think anyone would waste time compressing individual files and there are a a couple of zip files in there so, did they rar some and then close winrar and switch programs? The there are some that are uncompressed. Why not just one big rar?

There are some rars a couple months old. Were they using using the old commodore 64 tape drive to copy those?