Tom Williams ~ The Smoking Gun(s) or Phin's Pholly - page 6.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Quote from: NF6X on September 03, 2011, 09:11:26 PM

Quote from: Phinnaeus Gage on September 03, 2011, 08:50:33 PM

Quote from: NF6X on September 03, 2011, 08:44:42 PM

My hat is now securely fastened atop my head. I'll be back after I go feed the horse, if you know what I mean.

Yep, I do. I saw that episode of South Park.

LOL! Well, in this case, I meant that my neighbors were running a bit late so they asked me to feed their horse for them. Just hay; no chili. I did give him an extra carrot, though. Cheesy

I am so glad you said carrot instead of pineapple, for I saw that episode, too.

Quote from: greyhawk on September 03, 2011, 09:00:51 PM

This is by far the worst attempt of doxing I have ever seen and I have both seen and done a lot of them in my lifetime.

Would you be so kind as to explain that statement to me. I'm a tad slow tonight.

NF6X

member

Activity: 98

Merit: 10

Quote from: Phinnaeus Gage on September 03, 2011, 08:56:45 PM

PS: I won't share your secret, Terry Gilbert.

Drat! You figured me out! There goes my 10-year run of posting both anonymously and posthumously. Sad

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Can we start by safely assuming that BW and EG probably signed up on the same day and possibly on the same computer? (and before you say it, in the same chair with their pants...)

666 sroe [email protected] (delayed registration because he wanted to be the 666th member)
667 brucewagner [email protected]
668 Almad [email protected]
669 SergGT [email protected]
670 iamiam [email protected]
671 welsh (no email listed)

I believe we could assume that the people who signed up before, during and after BW and EG have no connection to them, with the exception all six are Bitcoin users, unless a direct connection is proven at a later date.

NF6X

member

Activity: 98

Merit: 10

Quote from: Phinnaeus Gage on September 03, 2011, 08:50:33 PM

Quote from: NF6X on September 03, 2011, 08:44:42 PM

My hat is now securely fastened atop my head. I'll be back after I go feed the horse, if you know what I mean.

Yep, I do. I saw that episode of South Park.

LOL! Well, in this case, I meant that my neighbors were running a bit late so they asked me to feed their horse for them. Just hay; no chili. I did give him an extra carrot, though. Cheesy

greyhawk

hero member

Activity: 952

Merit: 1009

This is by far the worst attempt of doxing I have ever seen and I have both seen and done a lot of them in my lifetime.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Quote from: NF6X on September 03, 2011, 08:23:21 PM

I'm not ready to call your whole story hogwash-or-not yet, but many of the assumptions and conclusions you're making seem like big stretches to me, so far.

I see that robert @ mckay.com has more than one account registered there, but I noticed lots of instances of more than one account from the same person last time I perused the MtGox leak file for interesting tidbits. I don't see how that email address is connected to any of this yet, nor do I see a plausible connection to edwardgel or some (*gasp*) Russian person, aside from their accounts being registered at about the same time. With over 60k accounts registered over the relatively short period of time between MtGox's inception and the leaking of their password file, there are bound to be lots of weird-looking coincidences in there.

Ok, I'm going to tell you a secret. Very few people know this, so don't spread it around: NF6X is not the name I was given at birth. I hope that you don't think any less of me because I'm posting here under an alias. Wink

I'll accept your argument, NF6X. I'll continue to make sense of it all.

PS: I won't share your secret, Terry Gilbert.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

It's not that much of a stretch to see that weusecoins.com and Tom Williams registered the same day, and probably at the same time on the same computer.

50730,haakjes,frank@root66.org,$1$9...
50731,hammerfortyfour,t.williams@bankofamerica.com,$1$9... (account created prior to Mt.Gox getting hacked--possibly EG)

major edit job here (by me, BRUNO)

253, macrohard ,[email protected],42d...
311,[email protected],[email protected],42d...(same password as above)
966, macro ,[email protected],$1$l...

46342,nayryakcm,[email protected],$1$...

254,Warhammer,[email protected],$1$... (Russian)

667,brucewagner,[email protected],$1$...
668,Almad,[email protected],ad8... (note password--not starting with $1$)
669,SergGT,[email protected],$1$... (Russian)
670,iamiam,[email protected],71b... (note password--not starting with $1$)

5699,edwardgel,[email protected],$1$... (note he opted to not create his own password this time)

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Quote from: NF6X on September 03, 2011, 08:44:42 PM

My hat is now securely fastened atop my head. I'll be back after I go feed the horse, if you know what I mean.

Yep, I do. I saw that episode of South Park.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Now, I will admit that this could be a wild goose chase, for I didn't do DD yet. That said, here it is nonetheless:

Don’t give the Fed a new job: http://blogs.reuters.com/great-debate/tag/mark-t-williams

http://en.wikipedia.org/wiki/Mark_T._Williams

The following quote is from the end of a comment left by Sergey (remember that name)

Quote

Banks and even insurers became vehicles to extract profit at any cost without thoughts beyond next bonus.
Capitalism failed there. Society cannot allowed bad guys to fall.
In your abbreviation SROB the key letter ‘I’ stays for ‘independent’ and it is absent.
Don’t forget every bank including Lehman had/has Risk controllers. They all failed badly. So the body must be independent.
FED doesn’t have infrastructure and expertise in measuring risk. But the truth is that nobody has.
Posted by Sergey | Report as abusive

NF6X

member

Activity: 98

Merit: 10

My hat is now securely fastened atop my head. I'll be back after I go feed the horse, if you know what I mean.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Hang on to your hats gain, I just found something else. Going to make a pot of coffee and take a leak. Back in a couple minutes. Possibly, the SIGTHTF!

NF6X

member

Activity: 98

Merit: 10

I'm not ready to call your whole story hogwash-or-not yet, but many of the assumptions and conclusions you're making seem like big stretches to me, so far.

I see that robert @ mckay.com has more than one account registered there, but I noticed lots of instances of more than one account from the same person last time I perused the MtGox leak file for interesting tidbits. I don't see how that email address is connected to any of this yet, nor do I see a plausible connection to edwardgel or some (*gasp*) Russian person, aside from their accounts being registered at about the same time. With over 60k accounts registered over the relatively short period of time between MtGox's inception and the leaking of their password file, there are bound to be lots of weird-looking coincidences in there.

Ok, I'm going to tell you a secret. Very few people know this, so don't spread it around: NF6X is not the name I was given at birth. I hope that you don't think any less of me because I'm posting here under an alias. Wink

indicasteve

full member

Activity: 140

Merit: 100

Man... I still think you are going on a wild goose chase...

This address is also in that password file:

31479,tien.dat79,[email protected],$1$YvOM9Q00$FuInXK.RW36tX33fKh8pJ0

That is the SAME emaill address of that wildtigon listed as the mybitoin.com owner on the bitcoinfeedback page.

Incidentally, the owner of the feedback site has the IP address of wildtigon. I'll bet the IP address is in Vietnam.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Quote from: NF6X on September 03, 2011, 07:52:25 PM

Quote from: Phinnaeus Gage on September 03, 2011, 07:32:23 PM

Patterns!

667,brucewagner,[email protected],$1$... (purposely waited till the 666th member joined so that he wouldn't be it)
668,Almad,[email protected],ad8... (note password--not starting with $1$)
669,SergGT,[email protected],$1$... (Russian)
670,iamiam,[email protected],71b... (note password--not starting with $1$)

The human mind is wonderful at detecting patterns... even if there's nothing there but random noise. Wink

Quote

(purposely waited till the 666th member joined so that he wouldn't be it)

That seems like a big stretch to me to discern purpose from a password file. How would he even know that the 666th person had just registered, unless Bruce Wagner and MagicalTux are the same person? Shocked

I could just as easily conclude that Bruce deliberately tried to be user 666, but was a second too late.

Quote

(note password--not starting with $1$)

I'm no expert on the MtGox password file leak, but if I recall correctly what I had read back then, a password not starting with $1$ indicates that it wasn't changed by the user at some point after MtGox changed their hashing algorithm. Or more accurately, the $1$ passwords in that region of the file belong to people who did change their password at some point after the hashing algorithm changed. If I was going to draw any conclusions from that at all, I'd say that two actively-used accounts in which one has a $1$ password and the other doesn't, are less likely to belong to the same person, since a given person would probably revise the passwords of all of their actively-used accounts on a site if they were going to revise any of them.

LMMFAO That was better than Muskie fishing. I got you to bite! I was joking about the 666th member to see if you would take the bait.

Your last point is valid except: Why did BW or EG not change their password, but one of them did?

and this:

253, macrohard ,[email protected],42d...
311,[email protected],[email protected],42d...(same password as above)

Let me ask you this: Do you think my whole theory is hogwash? A yes or no will suffice.

BitcoinPorn

hero member

Activity: 630

Merit: 500

Posts: 69

Quote from: cypherdoc on September 03, 2011, 07:43:11 PM

surely you aren't suggesting Stefan Thomas is Tom Williams?

My mind is blown.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Quote from: cypherdoc on September 03, 2011, 07:43:11 PM

surely you aren't suggesting Stefan Thomas is Tom Williams? Stefan has done some great work for the community and was one of the key speakers at Bitcon. i've seen him interviewed by BW and he seems like a very cheerful fellow and dedicated Bitcoin enthusiast in his own words.

No I was not claiming that at all. I was stating that the name and the name associated with the email account is different. BTW, do have a picture of him?

[owner-c] handle: 668732
[owner-c] type: PERSON
[owner-c] title:
[owner-c] fname: Stefan
[owner-c] lname: Thomas (If the owner's name is Stefan Thomas, then why does email link to another name)
[owner-c] org:
[owner-c] address: Sommerhofenstr. 136
[owner-c] city: Sindelfingen
[owner-c] pcode: 71067
[owner-c] country: DE
[owner-c] state: DE
[owner-c] phone: +49-7031-7853000
[owner-c] fax: +49-7031-700935
[owner-c] email: [email protected] Here (same website design as justmoon.ch and justmoon.net)
[owner-c] protection: B
[owner-c] remarks: 32086495
[owner-c] updated: 2011-07-21 03:19:14

NF6X

member

Activity: 98

Merit: 10

Quote from: Phinnaeus Gage on September 03, 2011, 07:32:23 PM

Patterns!

667,brucewagner,[email protected],$1$... (purposely waited till the 666th member joined so that he wouldn't be it)
668,Almad,[email protected],ad8... (note password--not starting with $1$)
669,SergGT,[email protected],$1$... (Russian)
670,iamiam,[email protected],71b... (note password--not starting with $1$)

The human mind is wonderful at detecting patterns... even if there's nothing there but random noise. Wink

Quote

(purposely waited till the 666th member joined so that he wouldn't be it)

That seems like a big stretch to me to discern purpose from a password file. How would he even know that the 666th person had just registered, unless Bruce Wagner and MagicalTux are the same person? Shocked

I could just as easily conclude that Bruce deliberately tried to be user 666, but was a second too late.

Quote

(note password--not starting with $1$)

I'm no expert on the MtGox password file leak, but if I recall correctly what I had read back then, a password not starting with $1$ indicates that it wasn't changed by the user at some point after MtGox changed their hashing algorithm. Or more accurately, the $1$ passwords in that region of the file belong to people who did change their password at some point after the hashing algorithm changed. If I was going to draw any conclusions from that at all, I'd say that two actively-used accounts in which one has a $1$ password and the other doesn't, are less likely to belong to the same person, since a given person would probably revise the passwords of all of their actively-used accounts on a site if they were going to revise any of them.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Quote from: wolftaur on September 03, 2011, 04:43:07 PM

Quote from: Phinnaeus Gage on September 03, 2011, 04:39:08 PM

Quote from: cypherdoc on September 03, 2011, 04:24:31 PM

Quote from: Raoul Duke on September 02, 2011, 12:12:32 PM

The anonymous guy was the user that went by the nickname of noagendamarket

how do u know this?

I'll explain it real slow: There's...this...thing...called...the...internet...

That, and 'noagendamarket' on a ton of posts on the forum turned to 'Anonymous' in a different color (because it's not a link) when the mods deleted noagendamarket's account here after he made a post threatening another group of users with harm.

A teaser! https://bitcointalksearch.org/topic/m.21444

cypherdoc

legendary

Activity: 1764

Merit: 1002

surely you aren't suggesting Stefan Thomas is Tom Williams? Stefan has done some great work for the community and was one of the key speakers at Bitcon. i've seen him interviewed by BW and he seems like a very cheerful fellow and dedicated Bitcoin enthusiast in his own words.

Phinnaeus Gage

legendary

Activity: 1918

Merit: 1570

Bitcoin: An Idea Worth Spending

Quote from: NF6X on September 03, 2011, 07:27:30 PM

Quote from: Phinnaeus Gage on September 01, 2011, 11:28:30 AM

It's not that much of a stretch to see that weusecoins.com and Tom Williams registered the same day, and probably at the same time on the same computer.

That's where you're losing me. I'll say that those two accounts appear to have been registered consecutively, but I don't see anything else that suggests that they were registered by the same person, and/or from the same computer, or even on the same day. Without IP logs and timestamps of registrations, how do you know that those accounts weren't registered from different addresses a few hours apart? Can we also assume that Tom Williams registered his fribit.no account a moment later?

Patterns!

667,brucewagner,[email protected],$1$... (purposely waited till the 666th member joined so that he wouldn't be it)
668,Almad,[email protected],ad8... (note password--not starting with $1$)
669,SergGT,[email protected],$1$... (Russian)
670,iamiam,[email protected],71b... (note password--not starting with $1$)

Different day?

This account could easily be a day earlier----------BUT (still connected, I say)

603,justmoon,[email protected],$1$... (registered just up prior to BW & EG registering) (an early Mt.Gox member)

Topic: Tom Williams ~ The Smoking Gun(s) or Phin's Pholly - page 6. (Read 16319 times)