Micah Lee 🫡

Micah Lee 🫡 @micahflee

For anyone digging through the GiveSendGo "Freedom Convoy 2022" data, that huge $215,000 donation? It wasn't an actual donation. So Silicon Valley billionaire Thomas Siebel gave the largest donation, $90,000 — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @byaaroncdavis: Update: The hack of the Christian fundraising website, GiveSendGo, has not deterred donors (but perhaps emboldened them)… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @EmilyGorcenski: how hackers used to have to hack: *tons of obscure unix shit* how hackers hack today: for i in range(10000000): prin… — PolitiTweet.org

Micah Lee 🫡 @micahflee

A 'working-class' trucker protest, eh? "The richer an American community was, the more likely residents there were to donate, and the biggest number of contributions often came from communities where registered Republicans made up solid majorities" https://t.co/F14MiSQnJz — PolitiTweet.org

Micah Lee 🫡 @micahflee

@LtCdrStacy @TwitterSafety @TwitterSupport I'm a journalist, I didn't have anything to do with the hack itself, and I'm redacting all private information about individuals — PolitiTweet.org

Micah Lee 🫡 @micahflee

While Twitter quickly reversed their decision to censor the New York Post Biden laptop story, but they're still actively censoring the DDoSecrets site and have been since 2020. Try posting an actual link to https://ddosecrets dot com -- it won't work. — PolitiTweet.org

Micah Lee 🫡 @micahflee

💕 when readers give me constructive criticism https://t.co/hA0Ta0QVFj — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @bbhorne: As the token Canadian in #DDoSecrets, I've been answering a lot of emails this week about #DDoSecrets. Here's a thread about s… — PolitiTweet.org

Micah Lee 🫡 @micahflee

@nonlinear @tedivm That's why the dump isn't public. It's only being released to journalists and researchers who request access — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @normative: I suppose I need to do a proper thread about this Durham filing folks are losing their minds over. OK, here goes. — PolitiTweet.org

Micah Lee 🫡 @micahflee

@tedivm There are no redactions in the original data. I redacted it — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @mattblaze: Wait till they find out what those subversive CS professors are teaching. Critical race condition theory, very large scale i… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @dancow: Tech pro-tip: Don’t send your passports to websites secured by thoughts and prayers https://t.co/Bkr20FBTvZ — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @Snowden: So... if nobody shows up for the invasion Biden scheduled for tomorrow morning at 3AM, I'm not saying your journalistic credib… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @SenSanders: Shock. Shock. Shock. Gas prices are at the highest level in 7 years while Exxon Mobil, Chevron, Shell & BP made nearly $25… — PolitiTweet.org

Micah Lee 🫡 @micahflee

Oh and those unredacted (I did the redaction above) photos of gov issued IDs? The hacker included the script they used to download them all using curl, over Tor, without any authentication. When @MikaelThalen told GiveSendGo about this issue they called it "fake news" https://t.co/iKU0pw8b9k — PolitiTweet.org

Micah Lee 🫡 @micahflee

@BATitaniumMan It contains a massive amount of private information. DDoSecrets is distributing it to journalists and researchers though, so you can contact them to try to get a copy. Their site is ddosecrets dot com — PolitiTweet.org

Micah Lee 🫡 @micahflee

There's also a TON of Stripe data. Like, type of CC, last 4 digits, billing address, etc. This is from an interesting summary.txt from Stripe, specifically for the Freedom Convoy 2020 campaign https://t.co/pDofpqQzel — PolitiTweet.org

Micah Lee 🫡 @micahflee

This leak also contains about 3GB of images of identification docs, about 1,400 of them, I believe from people who run campaigns. Here's a random sampling https://t.co/BxdxgwqKEl — PolitiTweet.org

Micah Lee 🫡 @micahflee

@elaifresh I found the campaign in the WayBack Machine. WTF is this? https://t.co/v0YW8rR5x1 https://t.co/wRECx2l9Id — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @MikaelThalen: Thread detailing just how devastating the latest GiveSendGo leak appears to be. Seems to have info on all users and every… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @molly0xFFF: send coffee money to your local extremism researcher, they'll need it this week — PolitiTweet.org

Micah Lee 🫡 @micahflee

@etenebris_ Not sure. There's a user_password_hash column that's 32 hex chars (I assume MD5), and a user_password_salt column that's like "5b44aa3c5390d3.04335105". (Though, I think this leak has source code so I can maybe find out exactly what they're doing) — PolitiTweet.org

Micah Lee 🫡 @micahflee

Here are the campaigns that have attracted most individual donors: #1: Freedom Convoy 2022 #2: Kyle Rittenhouse Legal Defense #3: Support COVID19 Federal Whistleblower Jodi Omalley #4: Facebook Whistleblower Support Fund Morgan Kahmann #5: Pfizer Whistleblower Melissa https://t.co/fbSnCdrWWx — PolitiTweet.org

Micah Lee 🫡 @micahflee

Here are the campaigns that brought in the most money. #1: Freedom Convoy 2022 #2: Abbichuu Gypsum Board Company (???) #3: Adopt a trucker (another Freedom Convoy one) #4: Voter Integrity Project #5: Kyle Rittenhouse Legal Defense https://t.co/q2fS6Bimqq — PolitiTweet.org

Micah Lee 🫡 @micahflee

The tbl_users table has 170,944 rows -- this is probably everyone who has made an account on GiveSendGo... and everyone's passwords are hashed with md5, though at least they're salted — PolitiTweet.org

Micah Lee 🫡 @micahflee

I'm starting to look at the latest GiveSendGo leak. The MySQL dump, called gsg_prod_v4_20220211.sql, appears to be a complete dump of their production database. It includes the entire donor history of everyone who's donated to any campaign before February 11, last Friday https://t.co/QIN0ObdUM1 — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @AOC: Fox News analysts already reaping the benefits of banning books, I see — PolitiTweet.org

Micah Lee 🫡 @micahflee

Donation site used by Freedom Convoy suffers 3rd data leak in two weeks. The new hack includes "a full 2.5 GB MySQL database dump, source code for their Bitbucket repo, information from their customer service systems” and limited credit card data https://t.co/zf8ssnxQCw — PolitiTweet.org

Micah Lee 🫡 @micahflee

The Canada "Freedom Convoy" movement kinda reminds me of a much stupider and far-right version of Occupy Wall Street, except financially backed by lots of rich people including at least one billionaire — PolitiTweet.org