Alright everyone, here is all the stuff I have been archiving since the DDoS on Kiwifarms and the #DropKiwiFarms campaign. I know a lot of you have already focussed on Liz Fong-Jones and her sidekick @DropKiwiFarms (who has infiltrated the Telegram channel and has been screengrabbing incendiary posts there). However, Liz and @DropKiwiFarms are openly working in concert with a couple of other accounts that I have reasons to suspect are League Trolls coming over from Reddit to get in on the action under the #DropKiwiFarms hashtag. Two of these other accounts are, I suspect, Bardfinn posting under an alt, but I have no way of conclusively proving this hush that I have. There are many pointers in that direction though.
The other two accounts that Liz Fong-Jones and @DropKiwiFarms appears to be conspiring with are:
1) Kevin Karhan aka @k3vk4 - a German speaking account that is a long-time Laurelai Bailey associate. Laurelai and this guy go many years back. This account also tweeted at Laurelai and Bardfinn dunking on a TERF, so he's likely a longtime follower of both these League Trolls, both of whom are or were /r/ContraPoints moderators. (It's even possible that @DropKiwiFarms is Laurelai - the infiltration and screengrabbing on Telegram is certain very reminiscent of how Laurelai infiltrated /r/antiwork earlier this year)
2) @antiKFaction (a suspected Bardfinn @PennyOaken alt) - This account was created and started tweeting on the 26th of August 2022, literally within days of the DDoS. :
"#KiwiFarms does not get the satisfaction of finding out which victim I am", LMAO, Steve, don't try to LARP, you're so damn obvious, you can't be anyone other than your pathetic, hyperbolic, over-dramatic, egotistical, narcissistic self.
@antiKFsaction was immediately retweeted by @DropKiwiFarms, showing that @DropKiwiFarms was anticipating his appearance on Twitter:
Three days before this account went live, on the 23 of August 2022, Bardfinn was apparently tweeting at some other TRA about the attack on KF from behind his locked main account, @PennyOaken
I personally suspect that @antiKFaction is Bardfinn's alt (if you don't know who Bardfinn and/or The League of Extraordinary Trolls are,
go here; TLDR they are Reddit powermods who are aggressively censorious TRAs, responsible for The Reddit Purge and taking down /r/the_donald who like LARP at being spies and women). Bardfinn already has an account on Twitter as @PennyOaken, but that account is locked. Bardfinn doesn't want to risk using his main account to openly conspire to DDoS third party service providers, so I suspect he created this new account, which appeared literally days after the DDoS, and immediately began retweeting Kevin, Liz and @DropKiwiFarms.
This account then tried to instigate TRAs into physically sabotaging employees' entry to Fiberhub's offices, telling TRAs that there are only 10 employees at Fiberhub and that TRAs should go there and engage in civil disobedience while blocking entrance to the building. @antiKFaction proceeded to post the company address of Fiberhub with Google Street images of the building, while suggesting physical locations that TRAs could best use to block access to the building.
I began archiving this @antiKFaction account as I noticed they started deleting tweets so I might have missed a few, but AFAK everything else is still there.
3) Another account of interest and explicitly connected to the conspiracy to DDoS KF & associate service providers is
the "GrayHat Academy" account on Github. This account maintains a list of IPS's IP addresses that purports to be an educational project to evade scrutiny, but in reality
the supposed blacklist of "rogue ISP" appears to be a DDoS list of websites run by Joshua Moon as well as KF associated service providers. I personally suspect this "GrayHat Academy" account is just another Bardfinn alt, but I have no way of proving this, just pointers in that direction. Liz and Kevin are both contributors to the "rogue ISPs" blacklist maintained at that account, and have listed code commits there. I however suspect they have been deleting or hiding edits in the public log file. (If anyone has a Github account please look into this, the log file looks pilfered IMO). Both Kevin and @antiKFaction were openly threatening KF's service providers Cloudflare, Fiberhub and Virtual Systems on Twitter with inclusion to the blacklist. Both Kevin and @antiKFaction posted CLI (command line interface) screenshots of themselves adding these service providers to the blacklist on Github, while implicitly threatening to use the blacklist for a DDoS (they didn't explicitly say DDoS but that was implied from their open threats).
Kevin in particular referred to his screenshots of Cloudflare, Fiberhub and Virtual Systems getting blacklisted as "warning shots", implicitly promising to do worse if Cloudflare, Fiberhub and Virtual Systems did not give into the blackmail.
If you have a Github account please make sure to report the "GrayHat Academy" account for ToS and Community Guideline violations. In your complaint, explain to Github that the list maintained by this account is not for educational purposes as falsely stated in the disclaimer (
"These identifiers are device data are provided as-is with no guarantee of accuracy or reliability, and are meant for ITsec-related education & training purposes only!"), but is a DDoS hitlist that is openly being used on Twitter to blackmail service providers into submission.
https://support.github.com/contact/...rt-abuse&report=other&report_type=unspecified (Look under *"I want to report harmful code"* and then select *"I want to report another type of malicious code"*.)
Now let's look at what I got to screengrab/archive:
- Kevin Karhan @k3vk4 and Laurelai Bailey tweeting at one another going years back (these tweets suggest that Kevin is a long-time associate and/or trusted member/collaborator of the League Trolls):
Archived:
https://archive.ph/YSJcc
- Kevin Karhan @k3vk4 tweeting at @bimbopolitic (an alt Laurelai Bailey was using while moderating /r/ContraPoints with Bardfinn and Merari01)
archived:
https://archive.ph/JOuHp
- Kevin Karhan @k3vk4 tweeting at Laurelai and Bardfinn simultaneously, showing he knows/followes them both:
- Kevin Karhan @k3vk4 adding another one of Joshua Moon's websites to the "GrayHat Academy" DDoS hitlist:
- The "GrayHat Academy" account on Github with the DDoS hitlist falsely posing as a "rogue ISP" list "for educational purposes":
- Liz Fong-Jones and Kevin both listed as commit-contributors to the DDoS hitlist, shown adding Joshua Moon-run sites and KF-associated service providers to the DDoS list:
https://github.com/greyhat-academy/lists.d
https://archive.ph/bg7da
archive:
https://archive.ph/JPqnG
- Ongoing archive of @antiAKaction tweets:
- Ongoing archive of @DropKiwiFarms tweets:
- Tweets from @antiKFaction where he's openly blackmailing Cloudflare, Fiberhub and Virtual Systems with CLI screenshots of them being added to the DDoS hitlist on "GrayHat Academy":
- Tweets from Kevin where he's openly blackmailing Cloudflare, Fiberhub and Virtual System with CLI screenshots of them being added to the DDoS hitlist on "GrayHat Academy":
I hope @Cloudflare, @fiberhub & @VSYShost consider this the last warning shots...
Fair Warning
cloudflare - or every other hoster providing services to #KiwiFarms - will be added after a max. 48 hour grace period if they don't #DropKiwifarms...
Archived: https://archive.ph/P8Vn2
- @antiKFaction openly instigating against Fiberhub on Twitter, urging TRAs to go to their offices to block the entry to the building through civil disobedience, telling them it's only 10 employees while posting pictures of the building and the best spots to block entry:
https://archive.ph/bXHke#selection-10227.0-10296.0 (
"All we have to do for that is to apply overwhelming pressure to a company with only 10 employees.")
https://archive.ph/bXHke#selection-10533.0-10537.253 ("
@fiberhub only has 10 employees. We can easily apply overwhelming pressure to such a small company. Keep the pressure on them.")
https://archive.ph/bXHke#selection-8491.0-8491.193 (
"I would never encourage anything illegal" he says as he's openly blackmailing ISP with getting them on a DDoS hitlist)
- @antiKFaction ranting against Section230
This is significant because
Bardfinn mods an anti-Section230 subreddit (r/AgainstSection230), that is mostly ignored by the rest of Reddit because no one wants to join a subreddit belonging to a control-freak censor. I suspect Bardfinn is now using the @antiKFaction account and the #DropKiwiFarms campaign to promote his personal pet peeve of having Section230 repealed. This for me and the blacklist on Github are the strongest indications that @antiKFaction and "GrayHat academy" are likely Bardfinn alts.
BTW, the reason I am archiving Twitter search results instead of individual tweets is because Keffals now claims we are faking the screenshots.
As you can plainly see, these are literal Twitter search results as they appeared online, nothing has been faked or Photoshopped here.
I'm sure Joshua Moon has other things on his mind right now but I hope he gets to see this eventually. This is literally an open conspiracy to commit cybercrimes and physical sabotage actions against various online service providers, while openly blackmailing them with getting them blacklisted on a DDoS list on Github. This is literal business interference.
