[ChuckMcM]

So you're saying "typical intelligence analyst stuff" is the reasoning here?

Generally analysts produce questions which operations runs down to figure out if what they think is going on, is actually going on.

Correct me if I'm wrong here but you're basically saying that you have done the first part and found some suspicious links but not the second part do develop actual evidence one way or the other, is that a fair assessment?

[rshnotsecure]

I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review.

You have my word.

EDIT: 5000 words not pages

[godelski]

If you make a post (assuming I see it, because I want to) I'll gladly read (and upvote) it. I think this is exactly the kind of thing HN wants to see.

[ChuckMcM]

Awesome, looking forward to it.

[lowtto]

That's the spirit. I've always loved a good challenge accepted attitude.

[sergiomattei]

I'm very interested. Commenting as reminder to check this later.

[jacquesm]

So, where is that post?

[rshnotsecure]

Check below for latest update. Wanted to comment so you got notification. My real name is in my profile with my email address so you’ve got me dead to rights on this one.

[J_cst]

That's a bookmark

[sergiomattei]

???

[rshnotsecure]

It’s coming. I’ve got butcher paper on the floor mapping out 2000 ASNs. My wife says I look like one of the detectives tracking down a serial killer with red string. I run my own consulting company, and actually lost my main client due to the above post being interpreted as “anti-China”. That has been an enormous setback.

Anyone can do this research I want to emphasize. Look at any suspicious VPN company. Now look at 10 of them. Now plug some of those names into Shodan.

Bear with me here, but if you then simply Ctrl-F for ASNs with the same name with the same LLCs, you will construct a perfect circle of peering that is an “internet within an internet”. What it seems to be is a poor man’s TOR. While the US gov built a Tor, this is an alternate Dark Web built by someone...you can pass through 1,000 servers on 500 different hosting companies none of which do legitimate business.

(Hope this counts as a mini blog post for now this must be 250 words).

[mmazing]

How's that coming along?

[rshnotsecure]

See above and below.