wh1sks
wh1sks
/ dnc_timestamp_summ_draft.txt
Last active
February 12, 2019 05:01
draft summary of DNC e-mail timestamps suggests exfiltration times
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Disclaimer: | |
| ------ | |
| Do NOT draw any conclusions from this analysis. It's FAR from complete. There are multiple plausible explanations | |
| which explain these observations. There are also major limitations. | |
| I am posting this because I feel it deserves more attention than me and current collaborators can give it. | |
| I am very open to collaboration and happy to give advice and point out things I noticed. | |
| This is obviously a polarizing issue and all I ask is that collaborators try |
wh1sks
/ dncleaks_scrape.csv
Created
September 6, 2017 21:54
We can't make this file beautiful and searchable because it's too large.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Motivation: | |
| This e-mail states that the DNC deleted e-mails after 30 days if they weren't saved: https://wikileaks.org/dnc-emails/emailid/43999 | |
| Methodology: | |
| 1. Go to https://wikileaks.org/dnc-emails | |
| 2. Leave 'search terms' blank. Sort by: 'Email date: newest to oldest'. Showing '200 e-mails per page'. Click search. | |
| 3. Yields 27515 e-mails. Scrape each page. | |
| 4. Post on github. | |
| If you sort by doc id you will notice that a lot of e-mails are missing. For some reason, e-mails were randomly missing from this search. |
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| asciiPID,hexPID,TXID,block | |
| ×ì8·]>Nÿoì9µÌ oÖ#Jý¡ ,d7ec38b75d3e4eff866f8bec39b511cc096fd60223154afd8e07979ca18c2091,fc6db24e5039ea97bee42d90ca48c31c3ec6441640de67e466fe6c31622d438a,1344225 | |
| GòÏÃÐZrùÀZÀu?k°l?¥°Þü ºÞ,478af2cf83c3d05a72f9c05ac007753f6b16b06c923fa5b0de9dfc821dba9ade,49acdce08dd14f62c32b9e74351384d4586ffb773a130d493174499b374245e0,1344231 | |
| ¸³ÊÌȬö<n é%ÊÓüdJg¸ìÝfå,b813b3caccc8acf63c6e0e820c209904e9251aca8ad3fc644a67b8ecdd1966e5,2bab7ed94c120414d28c6a40453f3d86fdc374e454b5ce4341225e91788414ba,1344234 | |
| 7L4÷qü¨å?¶xPx1zgyñ¬sSs62,374c34f771fca8e5873fb6785078317f877a6703110579f19dac735314733632,3db8ce4d3dfe9bbce6e62088d3015fe8320feeb4234977d242fb8ea922cc95a7,1344235 | |
| ú½) Bå¿! lÊÂQ¶Q»PO^èÌMs£¤Áu,fabd29a0a042e5bf2112856c8c01cac251b651bb05504f5ee8cc4d73a3a4c175,c22487653f7ded4db31fe42f0d22bf573116ae013a201d9b09adedd8ab77effd,1344237 | |
| sIúyË2BÉ£_òóo>¸WðÖ÷u¢Ì÷S!ô ,73498bfa899079cb32428bc9a35ff2f36f3eb857f0d6f775a2ccf7531721f485,3a2dd031f3d3567a22a6091dea439bca043e69eb1a6a |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| June 6/27-6/30 XMR PIDs | |
| мUHWp ÷¾$»öJN` 2b¬E÷$0Ûøð,d003bc554857917000f7be8c2404bbf6844a4e60a03262ac4513f72430dbf8f0,e480ca27372e759f59c038f4cd5ebc119a4b95f94cb106e3fa3d9938bbea24f0,1341508 | |
| gô*î¦f¾Z)X3 D0G̵ÜÇ$*§@Æ,8c151067f42aeea666be5a29580f3300ad448c3047ccb5dcc78c242aa740c688,dc752c690c699448539e5a9e881673c9a94bc12f70603590c459e95552ba37cb,1341509 | |
| %P¬t ATÉz=ì¥:¼P@ñ E¦,11131a25509a84ac74a00020114154c97a3d829deca53abc80185040f10045a6,c770e1b79ce9112a2e0d5deafbf78537f4d1e3603921b2b3ed757d03c285984f,1341512 | |
| Ìi[±¶\O¨\gjD½y-n.ÃRO}«">ØÛ,cc695bb1b65c4fa89c5c67806a449fbd792d6e2ec3524f7dab9d223ed89990db,efe333d0bde0b825501ffca6f7d6e5f4bd3075990527cf8f167541f7331ba3b8,1341513 | |
| 1V?)þ1 $æË ?N1qÚ`å;nªÛÆüÙ7,31563f29fe311d24e6cb1d3f4e3171da6012e53b056eaadb058ac6fcd9141737,0b3e67ec8450d6870f6f67492f280ccad6585cb17189b5e4965cdc9f2ab3ec4d,1341513 | |
| ý º_4f@·°ÙîÁÃ7~þDC Ü?rÓ,fd1dba5f8e34668240b7b0909208d9eec1c337137efe4443858fdc3f72d39283,09175301b282b1bd8706deb37ec2725184b597895503249 |
wh1sks
/ gist:e066c8ce72a5065e1640ba944dc51949
Created
July 4, 2017 06:49
XMR PIDs/Extra fields 1322000-1341507
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| b'"\x10p\xf1\x7f\x85Q\xf8\xc3\xff/\x88\x82\x95b\x1a\xb98\x15\x9c\xe9\xec\xbeo\xba\xadA7.v\x9b\x9d\xa1\xcd\xc2\r\xc2\xf4\x03f\x9c\xe2!\x01lA!\xef\xfaE\xce\xcc\x7f"\x05(\xb4#\x91\x06]\xc3\x97\x01\xa0',c592bcb662dc462fcc96a5f495584b21dafc9c968a944cba498a9ca86cd0d6be,1322000 | |
| b'"\x10\x18F\xc5\x83\xa9\x83\xe0\x8ej\xae\x8b\xae\x88\xaa\xc5\xcbY\x95R\xf9\xbb\x86\x89\x08\xbd\xb1\x98\x9e\xba\x03\xcd\x11\x93\xf1\xcb\xbf\xcb\x9c\xadn\xe3"\xe1\x14\xf1y\x9f\xa7\xb4#\xcd!3\x94\xca\xf4}\xe3\xa2zFs\x18',3011ce4eee60d8f8b7fbae21785d8de29b2f9f31ec0e9bedc8aa9ec147c749ab,1322001 | |
| b'"\x10p\xf1\x7f\x85Q\xf8\xc3\xff/\x88\x82\x95b\x1a\xb98\x15\x9c\xe9\xec\xbeo\xba\xadA7.v\x9b\x9d\xa1\x8e\xbb\xb1\xfb\xbd\xea\xa7\x96\xa1D\xf4\xc3\xf0\xd9\x1dg\xccAq\x96\xa4\x14\\-p\x1e\xc7la\xe3\xb4\x1d',ef25047baf37b65acac636cf87a1e9e4d0da6a1341bfb5bc98d4ab2c54fdbfd3,1322001 | |
| b'"\x10\xf5\xc8\x16\xe7\x1f\x19\xa7ER\xda5Q\xb7\xaa\xd3\xf4\xe8\xb8\x8d\xb3\xf5Vg\x15hF\xe3\xdc\xb7\x01\xd5U%a\xb3\x16\xa7\x9a\xc3\x805\xe9\xbf\xb3\xdf\xa6-\xeb\xdb\xb6n.\x9fe\xc9N\x |