Pastebin launched a little side project called VERYVIRAL.com, check it out ;-) Want more features on Pastebin? Sign Up, it's FREE!
Guest

th3j35t3r aka Tom Ryan dox

By: jellybro on Apr 11th, 2012  |  syntax: None  |  size: 43.99 KB  |  views: 10,297  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. Q: Are Thomas Ryan and th3j35t3r one and the same person?
  2.  
  3. tl;dr: Yes. You fucking bet they are. In the words of Oscar Wilde, however, ‘The truth is rarely pure and never simple.’ Thus, if you want the full, uncensored dox on th3j35t3r, you’re going to have to bear with me for the next ten minutes as I tear apart his tissue of lies and disinformation.
  4.  
  5. Now concentrate, cos here comes the proof...
  6.  
  7. Warning: Long dox is looooooooong. I trust it will prove to be an enlightening read however, not least for Mr Thomas Ryan of 86 Amber Street, Staten Island NY.
  8.  
  9. **********
  10.  
  11. Among the 9,000 names to have been linked with @th3j35t3r, one that keeps cropping up is that of @TomRyanBlog. The dox has been denied by th3j35t3r, but then Sabu repeatedly denied that he was Hector Monsegur, and we all know how that one ended up...
  12.  
  13. While many Anons have been focused on reverse DNS lookups, port scanning and conventional doxing methods to unmask Jester, no one seems to have tried a simpler technique: writing analysis.
  14.  
  15. If Tom Ryan (TR) and Jester (J) are one and the same person, it should be easy to tell. They’ve written 3,000 tweets between them. Even the l33t3st of the l33t would struggle to convincingly maintain two separate writing styles over the course of thousands of tweets and numerous blog posts.
  16.  
  17. For those who are new to the party, here’s an overview of what we know about TR and J:
  18.  
  19. Both are conservative, right-wing and love their precious military. Both hate #OWS, Wikileaks, Manning and are obsessed with unmasking Anons. Both are fixated with Sabu (still!), Team Pois0n and Cabin Cr3w. Both enjoy love-ins with @AsherahResearch, @AnonymousDown and all the usual trolls.  In short, they’re both neo-con faggots. But are they one and the same faggot, or are they separate fags who happen to be pursuing identical vendettas?
  20.  
  21. Before we get bogged down in analyzing their writing styles, here’s some lighter tit-bits to get things kick-started:
  22.  
  23. 1. Last year, TR and J both attended Hacker Halted in Miami and DEFCON in Nevada. Based on what we know of the pair’s political leanings and infosec knowledge, that alone automatically narrows them down to less than 5,000 possible suspects.
  24.  
  25. 2. TR and J both like sushi (a trifling detail, but one that helps build a picture of their personalities). TR: “@p0isAn0N not going to the right Pizzaria. If you are in Boston you should be going to BoLoCo for Burritos anyway. And Duozo for Sushi.”
  26. J: “#hackerhalted delegates ... Stay clear of Cafe Bastille. Great sushi at Bali Cafe though... Stayin frosty.”
  27.  
  28. 3. Tom Ryan has form for assuming false identities – such as ‘Robin Sage’. See here for the full story:
  29. http://www.darkreading.com/insider-threat/167801100/security/privacy/225702468/index.html
  30.  
  31. INTERESTING FACT: @RobinSage joined Twitter on 26th December 2009 – exactly one week after @th3j35t3r joined.
  32.  
  33. The connection between Tom Ryan, Robin Sage and Jester was first brought to my attention by this tweet from @LulzKitten on 29th March 2012:
  34.  
  35. “Okay, let's cut the crap, hello @Th3J35t3r aka@TomRyanBlog aka robinsage. Game over. Was fun, at least sometimes. Next nemesis, plox!”
  36. (Note: Direct links to all tweets quoted in this dox can be found cited in the conclusion.) After reading LulzKitten’s tweet, I cast a casual glance over the Twitter feeds of Tom Ryan and Jester, and instantly noticed some similarities between the pair.
  37.  
  38. The most damning evidence linking TR and J – the smoking gun – will be presented towards the end of this dox, if you can wait that long, but first, let’s perform some writing analysis. After all, if TR and J are the same person, there ought to be some similarities in their writing styles, surely? You betcha. Here we go then:
  39.  
  40. Anyone who’s followed J on Twitter and read his blog may have noticed that he has a very distinctive writing style. Let’s pick through some of Jester’s trademark phrases, and then see if we can spot them recurring in TR’s tweets:
  41.  
  42. 4. ‘Hmmmm’. Jester likes to say ‘Hmmm’ ‘Errr’ and ‘Ahemmm’ a lot. In fact he likes to say them so much that he even uses these filler phrases in his blog titles, as well as littering his tweets with them. Here’s some examples:
  43.  
  44. 5th April: “@deftpunkz - umm holy shit. I dont know what to say guys, errrr thanks, i think? -”
  45.  
  46. 4th April: “Al-Qaida 'blacked out' on the internet (effectively switched off) >>>http://timesofindia.indiatimes.com/tech/news/internet/Al-Qaida-blacked-out-on-internet/articleshow/12529550.cms #infosec#saladin #ahemm”
  47.  
  48. 3rd April: “Now...... imagine...... how many of those listed in my last, were ummmmmm - on the 'shit list' - just a thought??? #anonymous”
  49.  
  50. 27th Feb: “#Wikileaks & #anonymous dump 5 million#strafor internal emails obtained by #anonymouslast Dec..umm this right here...”
  51.  
  52. 21st March: “Anti-Anonymous hacker threatens to expose them (via MSNBC) http://www.msnbc.com/id/46716942<<< ummm too late. #military #cyber #security#infosec #DoD”
  53.  
  54. 15th Nov, Wordpress blog title: “Occupy Wall Street?? 99%?? Ummm.”
  55.  
  56. Hmmm, I wonder if Tom Ryan also likes to say ‘Hmmm’? Let’s take a look:
  57.  
  58. 10th April: “How To Prevent Data Leaks From Happening To Your Organization http://zite.to/HCucc8hmmm...how do you prevent the carbon factor from leaking?”
  59.  
  60. 6th April: “Hmmm So @AnonW0rmer is arrested at 10:30http://j.mp/HiAASP tweets till 3:32, @ItsKahunadisappears @AnonymousIRC disappears for 4 Day >>>”
  61.  
  62. 15th March: “CSI tonight has a scent of Anonymous. Anthropology professor teaching about Hactivism. Hmmm who came it be?”
  63.  
  64. 11th March: “@kennethlipp hhhmmmm do you think any anons donated money to his reelection campaign?”
  65.  
  66. 7th March: “@CryptKper @v0ld4m0rt you are spot on! Who could that have been? Hmmmmm”
  67.  
  68. 16th Feb: “@agentdarkapple Interesting! Hmmm! I can see why you think I would be L and you would be N. L doesn't smile like me”
  69.  
  70. OK, that’s enough Hmming - on to point #5: ‘Tick tock’. Jester loves to say ‘Tick tock’ – it’s one of his favorite phrases. Look:
  71.  
  72. 6th March: “From 3.5 months ago:https://th3j35t3r.wordpress.com/2011/11/19/if-i-am-wrong-ill-say-im-wrong-heres-my-apology/...... from 1 hour ago ....http://www.foxnews.com/scitech/2012/03/06/hacking-group-lulzsec-swept-up-by-law-enforcement/ tick tock toldya.”
  73.  
  74. 3rd August: “'RT @anonymousabu: @hjjrc @SparkyBlaze Your problem is with a ghost. Someone you can neither find nor stop.' << you have same problem. #tick”
  75.  
  76. 27th July: “@anonymousabu tick tock.”
  77.  
  78. 24th July: “TICK TOCK. #toldyac2dc37a7d9d3238877a127f2d5171c9d”
  79.  
  80. 21st June: “Tickety Tock.....”
  81.  
  82. 25th June blog entitled LulzSec’s Cloudflare Configuration: “Tickety Tock Tock."
  83.  
  84. Why, isn’t that a quirky little phrase? I wonder if Captain Hook – sorry, Tom Ryan – also uses the same terminology. Oh, what’s this we have here from 27th Feb?
  85.  
  86. “#Anonymous I am working on my big release. Hmmmm who should it goto? Tick Tock”
  87.  
  88. There’s even a ‘Hmmmm’ thrown in for good measure. How Jester-esque!
  89.  
  90. With a nudge and a wink, we move onto #6: Jester loves nothing more than to sign off his tweets with a sly wink. Just like so:
  91.  
  92. 28th March: “@wwpinc - just in case you were not aware: >>>https://th3j35t3r.wordpress.com/support/ <<< - keep up the great work ;-) Peace. #pgr #wwp#woundedwarrior”
  93.  
  94. 26th March: “Al-Qaida forums crippled in suspected cyber intervention http://j.mp/GSd8ih << bad things happen to bad people, apparently ;-) #infosec”
  95.  
  96. 11th March: “@RepDanGordon @FBIPressOffice I merely stated u were on the list, u seem awful jittery. U need to calm down >> ;-)”
  97.  
  98. 2nd Oct: “RT: @mach2600 @th3j35t3r It's wobbling ... up, down, up, down... <<< gotta love NGINX - always somethin huh ;-)”
  99.  
  100. 16th June: “standby for supporting clarification onhttp://th3j35t3r.wordpress.com/2011/06/16/quick-n-dirty-just-for-clarification/?utm_source=Jesters+Court+Blog&utm_medium=twitter - close ya eyes if ya already saw it yesterday. ;-)”
  101.  
  102. 2nd June: “http://www.foxnews.com/scitech/2011/06/02/pentagon-has-secret-list-cyber-weapons/ - #justsayin;-) #oorah”
  103.  
  104. Now it’s TR’s turn to have a sly wink:
  105.  
  106. 5th April: “The beauty of data-mining in a social world, I don't need to be connected to you, so you can't block me. You just need to be on my radar ;-)”
  107.  
  108. 5th April: “@x_ryujin_x @render64 @bitchiest @kalyptonetthink of what full dox did for Sabu ;-)”
  109.  
  110. 4th April: “@LauraWalkerKC @BobbyCarbon@NavySEALsORG @Packetknife @HonorThemYou should record it ;-)”
  111.  
  112. 14th March: “To Geeks & Nerds 3/14 is known as Pi Dayhttp://www.youtube.com/watch?v=JTZtuMdkUksTo Horny Men it's known as Steak & Blow Job Day! The GF reminded me ;-)”
  113.  
  114. 13th March: “@JackalAnon warned #Anonymous 2 Days Ago about OAuth and Apps. We've warned you about TOR. ;-)”
  115.  
  116. 14th Feb: “Why I'm Glad My Boyfriend Isn't On Facebook - Forbes http://j.mp/z9XNrP by @kashhill | Leaving Facebook made me never want to go back ;-)”
  117.  
  118. Next up, it’s similarity #7 – ‘Stay Frosty’. This, Jester’s catchiest of catch-phrases, crops up all over his tweets:
  119.  
  120. 2nd April: “http://www.cbsnews.com/2100-202_162-20075647.html <<< still going on about this? Stay frosty and have a Cupcake??”
  121.  
  122. 10th Nov: “#stayfrosty -Word of advice 2 @barrettbrownlol: Just because you're paranoid doesn't mean they aren't out to get you. >”
  123.  
  124. 26th Oct: “#hackerhalted left a little something under the projector in Alhambra SCADA room. Tweet me a photo of what's there. #stayfrosty”
  125.  
  126. 25th Oct: “#hackerhalted delegates ... Stay clear of Cafe Bastille. Great sushi at Bali Cafe though... Stayin frosty.”
  127.  
  128. Now let’s see what Monsieur Ryan has to say for himself:
  129.  
  130. 10th April: “Iran plans to unplug the Internet, launch its own "clean" alternative http://zite.to/Iqm1Ba#anonymous @CabinCr3w Stay Frosty ;-)”
  131.  
  132. 16th March: “@testeux1 Class on Strategy? I can teach one at The Spy Museum in DC @wikileaks @revmagdalen@AnonymousIRC @YourAnonNews Stay Frosty ;-)”
  133.  
  134. 13th March: “#Anonymous in your time of fear those of you that have used delete.twitlan / tweeteraser / twitwipe A Special Thank You!!! Stay Frosty! ;-)”
  135.  
  136. 13th March: “@jackie_singh @krypt3ia I was promoted today to Brigadier General Packet of The Cyber Brigade@th3j35t3r now reports to me! Stay Frosty ;-)”
  137.  
  138. 12th March: “Finch + Reese = ;-) .... Stay Frosty & Watch Your 6!”
  139.  
  140. Hang on a sec, isn’t it a bit, well, *obvious* for Tom Ryan to be liberally dropping Jester’s favorite catchphrase into his tweets? Yep, you’re right – it’s very obvious. But here’s the thing: the AntiSec dox that named Jester as Tom Ryan landed in Pastebin on 11th March. Notice how TR deliberately goes out of his way to play up to the ‘Stay Frosty’ caricature in the ensuing days? That’s because he realizes that the more he pretends to be Jester, the more people will be inclined to write him off as just another Jester wannabe. For another example of this tactic, here’s how J tweets every time he downs a Muslim extremist website:
  141.  
  142. 1st March: “http://www.rjfront.info - TANGO DOWN. Temporarily. For enabling recruitment, & co-ordination of jihadist terror cells via web.”
  143.  
  144. 1st March: “http://www.atahadi.com - TANGO DOWN. Temporarily. For online incitement to cause young muslims to carry out acts of violent jihad.”
  145.  
  146. Exactly one month later, on 1st April, TR tweets the following:
  147.  
  148. “www.ic3 .gov - TANGO DOWN. Temporarily. For not doing your job, & not arresting #Anonymous”
  149.  
  150. And: “www.fbi .gov - TANGO DOWN. Temporarily. For enabling recruitment, & co-ordination of#Anonymous via web.”
  151.  
  152. At this point, obvious troll is obvious – within days of LulzKitten’s tweet linking Tom Ryan and Jester, TR goes out of his way to tweet ‘Stay Frostys’, Jester winks and ‘TANGO DOWN’s. To give him credit, it’s a pretty smart way to make people think you’re nothing more than a Jester fanboy. Sadly for Thomas, it’s too late; the evidence linking Tom Ryan to Jester began from the moment TR began tweeting in January 2012. Prior to AntiSec dropping Jester’s dox on 11th March, Tom Ryan had only tweeted ‘Stay Frosty’ twice in three months. Immediately afterward, he tweets it five times in four days – complete with the Jester’s trademark wink.
  153.  
  154. So does that mean that all of the foregoing information is is part of an elaborate ploy, cooked up by Tom Ryan and Jester, to obfuscate the identity of the real Jester? In the case of the ‘Stay Frostys’ and the ‘TANGO DOWN’s, yes, it probably is. Thankfully, there are dozens of other textual similarities between the pair – similarities that are too subtle to be part of a pre-planned disinformation campaign.
  155.  
  156. Which leads nicely on to point #8: ‘Much’. Note the phrase that appears in the following tweets from Jester:
  157.  
  158. 18th June: “http://www.techhomethebacon.com/news/hacking-infosec/th3j35t3r-links-nakomis-to-lulzsec-group-cover-up-ensues.html - backpeddaling much? Hacked? lol. -”
  159.  
  160. 18th June: “Back-pedalling much?https://twitter.com/#!/Anonakomis/status/81862870664609792 #js”
  161.  
  162. August 21st Wordpress blog entitled If ya can’t beat em, make some shit up??? LMAO!: “coincidence much?” “projection much??”
  163.  
  164. I wonder if TR ever lets slip a similar phrase? Oh, what’s this?:
  165. 14th March: “@kaepora Nadim, delete much? You're in the snitch crew ?https://twitter.com/#!/realytcracker/status/143411708369715201 of @Anonymousabu & @ioerror”
  166.  
  167. Coincidence much?
  168.  
  169. #9: Jester loves to leave trailing dots in his tweets:
  170.  
  171. 9th April: “<<< drums fingers on desk....”
  172.  
  173. 3rd April: “Now...... imagine...... how many of those listed in my last, were ummmmmm - on the 'shit list' - just a thought??? #anonymous”
  174.  
  175. 22nd November: “AFK.......”
  176.  
  177. He also uses trailing dots when he’s typing live into Notepad in this YouTube video: http://www.youtube.com/watch?v=WeO44IWlkfU
  178.  
  179. More of Jester’s ‘trailing dots’ tweets are cited at the end of this dox. Now it’s TR’s turn to deploy this tactic:
  180.  
  181. 6th April: “@kennethlipp that's how it went down with Barrett Brown too. Remember they ended up going to every address for him....according to him”
  182.  
  183. 5th April: “@Bitchiest @KalyptoNet @TomRyanBlog The Secretary disavows this tweet and everybody in it...”
  184.  
  185. 4th April: “#Anonymous ever wonder why certain high ups in your collective are never V& .... Look at cases that never went to court & who has relocated”
  186.  
  187. Again, more examples of this idiosyncrasy can be found cited at the end of this dox, as well as liberally scattered throughout Tom Ryan’s Twitter feed.
  188.  
  189. #10: Arrows. Jester loves to use arrows to break up words in his tweets, <<just like this>>:
  190.  
  191. 9th April: “"@VizFoSho: @th3j35t3r dun goofedhttp://www.picvalley.net/u/1980/407013641289457528133400533586itAR4VE93lm7DAkGd2.PNG@RepDan_Gordon" <<< Shit ya got me! What am I to do? Btw now I am near north pole.”
  192.  
  193. 28th March: “@wwpinc - just in case you were not aware: >>>https://th3j35t3r.wordpress.com/support/ <<< - keep up the great work ;-) Peace. #pgr #wwp#woundedwarrior”
  194.  
  195. Now TR:
  196.  
  197. 6th April: “Hmmm So @AnonW0rmer is arrested at 10:30http://j.mp/HiAASP tweets till 3:32, @ItsKahunadisappears @AnonymousIRC disappears for 4 Day >>>”
  198.  
  199. 13th March: “Don't know whether to laugh or feel bad but come on: (compatible;+MSIE+6.0;+Windows+98;+Win+9x4.90) << In This Day An Age??”
  200.  
  201. 9th March: “conspiracy 1. a plan or agreement to carry out an illegal or harmful act 2. the act of making such plans >> aka #Anonymous Ops #justsayin<<”
  202.  
  203. Glance through their tweets and you’ll see that J and TR use <<arrows>> all the time.
  204.  
  205. #10: UPPER CASE. Compare the tweets of J and TR and you’ll notice that they both love to highlight single words in capitals. Jester first:
  206.  
  207. 9th April: “WARNING: Tweeps in mirror are closer than they appear.”
  208.  
  209. 18th March: “I'm still asked WHY I hit #wikileaks, skip to 28mins 12secs & Major TJ O'Connor abt sums it uphttp://www.youtube.com/watch?v=buY3I4PkK98<<worth watching it all.”
  210.  
  211. 11th March: “@repdangordon be advised, when u file ur complaint to feds, they ARE going need ur cell for forensics to determine IF I hacked u at all ;-( ”
  212.  
  213. Tom Ryan’s turn:
  214.  
  215. 5th April: “INTERESTING: What is this ugly brown stain on a Key Member of Anonymous' back? I need to do my cropping for the new site launch. Peace!”
  216.  
  217. 5th April: “#Anonymous why so many military and sovereign citizen connections? GOD I aam glad I took 2 weeks to lay low.”
  218.  
  219. 4th April: “@MaxVenator Too cold and windy for the Hamptons BUT you gave me a good idea. Maybe we can turn Plum Island into a resort for#Anonymous”
  220.  
  221. Jester and Tom Ryan both use this technique DOZENS of times in their tweets.
  222.  
  223. #11 features a more subtle similarity between our Jester and our Clown:
  224.  
  225. Jester, 21st August: “If ya can’t beat em, make some shit up??? LMAO! -”
  226.  
  227. TR, 16th March: “@exiledsurfer ROFLMAO! Reminds me of being in Bahrain & Abu Dhabi hearing Garth Brooks "Friends in Low Places"”
  228.  
  229. Jester and Thomas don’t always laugh their asses off, but when they do, you can bet it’s in upper case with an exclamation mark at the end. (More examples, as always, are cited in the conclusion of this dox.)
  230.  
  231. #12: J and TR aren’t very good at spelling. They struggle especially with words such as ‘its’ and ‘it’s’. Jester’s tweets aren’t usually too bad for typos, as he doesn’t rush them (because he knows they will be analyzed by a wide range of foes who might otherwise have cause to mock him for his poor grammar). He also has the autocorrect on his Android phone to help him. He still struggles with those pesky apostrophes that autocorrect can’t pick up however, especially when he tweets from his desktop:
  232.  
  233. 6th March: “WTF is Wikileaks gonna do now it's source of illegally obtained private info (anon/lulz) has had it's head & skillset removed? #2birds1Stone”
  234.  
  235. 21st June: “Seems almost as if 'somebody' doesn't want you to see my last link - here's a pastebin of it's content.”
  236.  
  237. In his Wordpress blog however, Jester often mixes up his apostrophes, especially in words such as ‘its’:
  238.  
  239. “With Netcat listening at the other end for incoming connections, you can configure it to execute it’s own script when it receives a connection for example to send a Message of the Day to the connecting device, you would run netcat like this on your server”
  240.  
  241. Watch his two YouTube videos (links cited at the end) in which he types directly into Notepad and you’ll see he also fails to put apostrophes into words such as  ‘lets’, ‘its’ and ‘Thats’. 2:20 into his XerXes DoS Attack video and you’ll see that the text displayed on Jester’s self-designed software also contains typos: ‘SUCCESFULLY’ should have two ‘s’ in the middle, while at 2:29, you’ll see that ‘Secured’ has also been spelt wrongly. At 6:52 he also makes the same error when typing into Notepad.
  242.  
  243. Does Tom Ryan fare any better in the spelling stakes? No. In fact he’s even worse when it comes to tweeting typos. That’s because Thomas tweets ten times as frequently as Jester, tweets more hastily (lots of rushed replies to his Twitter buddies) and because he writes the tweets on his Mac, which doesn’t autocorrect his mistakes. Look:
  244.  
  245. 4th April: “@AdrianChen surprised your not all over the@Anonw0rmer arrest and shortly after the disappearance of @itskahuna”
  246.  
  247. 5th April: “To those I owe something too, It's on it's way!”
  248.  
  249. 30th March: “RED ALERT: tomorrow is #NoClick31 just as a precaution. Rumor has it #Anonymous is using it's Porn Bots for #opBlackout click to DDOS attack”
  250.  
  251. Wanna see more? Just read his tweets.
  252.  
  253. OK, we’ve almost reached the really juicy stuff linking Jester and Thomas, but first there are a couple more writing similarities to rattle through:
  254.  
  255. #13: J and TR write numbers numerically rather than alphabetically – even when composing short tweets.
  256.  
  257. Jester, 28th Feb: “4 more Anons V&'ed http://tinyurl.com/8a2g5k5#anonymous”
  258.  
  259. 10th Nov: “#stayfrosty -Word of advice 2 @barrettbrownlol: Just because you're paranoid doesn't mean they aren't out to get you. >”
  260.  
  261. 27th November: “#saladin (XerXes bro)- 'the best weapon is the one u never have 2 fire...I prefer the weapon u only need 2 fire once.'”
  262.  
  263. 20th July: “Never saw a wild thing sorry 4 itself. Small bird drop frozen dead from bough without ever having felt sorry 4 itself.”
  264.  
  265. TR – yep, you’ve guessed it – does exactly the same:
  266.  
  267. 5th April: “@ohmylulz will with 2 False Positives.@missarahnicole @AsherahResearch”
  268.  
  269. 4th April: “Ruh roh! A certain key #Anonymous member disappears for 4 days then reappears. We know what that means.”
  270.  
  271. 3rd April: “@Ihazcandy I should start digging into them. Since I have 2 weeks of downtime.”
  272.  
  273. OK, moving on (we’re nearly done, I promise) to #14: Hashtags. If you go to tweetstats.com and enter TR and J’s twitter names into separate windows, a series of pretty graphs will be generated that will allow you to compare their tweeting patterns. You’ll notice that they tweet from separate devices, to eliminate the possibility of accidentally tweeting to the wrong account - Tom Ryan likes to keep his iPhone in one pocket and his Android in the other for when he’s playing Jester. Click on the Tweet Cloud tab at the top of the page and you’ll be able to view the most frequent hashtags used by both parties. Not too surprisingly, given their obsession with all things masked, it’s #anonymous. There are also three other hashtags that the pair use prominently however – #fail, #justsayin and #infosec. The latter one is understandable, but the other two? Interesting. Let’s see some #fail and #justsayin in action, starting with Jester:
  274.  
  275. 3rd November: “#opcartel #anonymous You should really listen to what this man has to say. Remember your track record is full of #fail”
  276.  
  277. 15th August: “@anonymousabu U R #fail. U hurt who u claim to fight for (lol), u have agenda < http://reg.cx/1Qps& the agenda is >”
  278.  
  279. 14th August: “So @landrytom u finally got ur mention. Damn u zeroed my 'xchat'? Please all check out his timeline. Then ask him where is the pwnage? #fail”
  280.  
  281. 29th July: “1st up: My doxing. That's a #fail. (again) I have never been Ryan Berg, John Willander, Robin Jackson, Anthony Freed, Beau Colvin. #opFrosty”
  282.  
  283. 2nd June: “http://www.foxnews.com/scitech/2011/06/02/pentagon-has-secret-list-cyber-weapons/ - #justsayin;-) #oorah”
  284.  
  285. Now it’s Tom Ryan’s turn to #Fail (#Justsayin):
  286.  
  287. 5th April: “@agentdarkapple @AsherahResearch she's definitely is no @elizadushku , Mila Kunis or Megan Ackerman. So she's a #Fail”
  288.  
  289. 2nd April: “@subverzo TY for verifying 2 alternate personas yours & @CrappyTires . FYI, Everyone in the CT world knows Shumukh al-Islam Forum. #FAIL”
  290.  
  291. 9th March: “@AnonymousIRC you do know they rig cases to#FAIL inorder to capture bigger FISH ..... Right?@atopiary @lolspoon @AnonymouSabu”
  292.  
  293. 9th Feb: “Dangerous Tweets: Arrested, fined in 140 characters or less http://j.mp/yWAV4G << What ever happened to contextual analysis? another#Fail” (Note the classic Jester-style arrows used in this tweet as well.)”
  294.  
  295. 10th March: “#anonymous remember threatening people or family members can lead to several crimes. If they are harmed it becomes much worse. #justsayin”
  296.  
  297. 9th March: “conspiracy 1. a plan or agreement to carry out an illegal or harmful act 2. the act of making such plans >> aka #Anonymous Ops #justsayin<<”
  298.  
  299. Plenty more examples, as always, can be found cited in the footnotes at the end of this dox.
  300.  
  301. OK, here endeth the writing analysis lesson. Thank you for your patience :) It would be fair to say we’ve established that Jester and Tom Ryan tweet in an uncannily similar manner, but that’s not all. Now we get on to the really good shit...
  302.  
  303. #15: Tweet times. Using tweetstats.com, it’s possible to compare the times at which J and TR tweet. A quick glance at their respective Tweet Density graphs reveals a similar pattern:  neither of them tweets between 3am and 7am EST: they’re both East coast bitches. Interesting.
  304.  
  305. #16: A few days ago, @VizFoSho tweeted the following image:
  306.  
  307. http://www.picvalley.net/u/1980/407013641289457528133400533586itAR4VE93lm7DAkGd2.PNG
  308.  
  309. It depicts two Jester tweets from 7th April, both geo-stamped with Atlantic City, NJ on them. Atlantic city is within 150 miles of NY, where Tom Ryan lives. On 26th March, Jester also posted a single tweet from New York: https://twitter.com/#!/th3j35t3r/status/184333789697282048
  310.  
  311. Normally, Jester’s tweets don’t reveal his location. Up until April 2012, there had only been four instances in which Jester’s tweets revealed his location – and two of those occurred when he was at DEFCON Nevada and Hacker Halted in Miami, occasions when he was undoubtedly eager to reveal his location in order to prove he was in attendance. Were the New York and Atlantic City revelations accidental (Tor for Android not working properly perhaps?) or was Jester trying to provide more misinformation?
  312.  
  313. After @VizFoSho pointed out the NJ link (the NY slip-up had gone unnoticed), Jester went out of his way to post two tweets from ridiculously exotic locations – Cape Town on 9th April and then Hawaii on 10th April:
  314.  
  315. https://twitter.com/#!/th3j35t3r/status/189464600318722049
  316. https://twitter.com/#!/th3j35t3r/status/189464600318722049 “The octopus here is amazing. Dontcha think :-)”
  317.  
  318. Jester has never previously switched his location to a far-flung location purely for the lulz. Why should he suddenly be trying so hard now that he’s been identified as an East coast slacker? If he’s not Tom Ryan, why should be bothered if people think he’s from NJ or NY?
  319.  
  320. On 4th April, Jester made the second of his two Atlantic City tweets at 4:03pm. 11 minutes earlier, Tom Ryan had also posted a tweet. For the next 48 hours, neither account tweeted – a rare occurrence, especially for TR who averages over 30 tweets a day. Enjoying a couple of days in Atlantic City playing the slots, perhaps?
  321.  
  322. Here are the 4th April tweets from both parties:
  323.  
  324. https://twitter.com/#!/th3j35t3r/status/187610604314431488
  325.  
  326. https://twitter.com/#!/th3j35t3r/status/187616455762784257
  327.  
  328. https://twitter.com/#!/TomRyanBlog/status/187612824187584512
  329.  
  330.  
  331. Curiouser and curiouser. But that’s not all. On 23rd March, TR tweets:
  332.  
  333. “Headed to South Beach to enjoy this great weather! Later Tweeps!”
  334.  
  335. https://twitter.com/#!/TomRyanBlog/status/183199880922148864
  336.  
  337. For the next 48 hours, Jester and Tom Ryan are both absent from Twitter.
  338.  
  339. A month earlier, on 17th February, the same thing happens after TR tweets:
  340.  
  341. “Off the Grid for a few days ! Have a great 3 day weekend!”
  342.  
  343. https://twitter.com/#%21/TomRyanBlog/status/170321854723129344
  344.  
  345. For the next four days, neither party tweets. The first person to break the Twitter silence is Jester, and it’s another rare instance of him revealing his location – Arlington VA.
  346. https://twitter.com/#!/th3j35t3r/status/172077181051219968
  347. Enjoy your three-day weekend, Thomas?
  348.  
  349. I stated earlier that until April Jester had never previously switched his location to a far-flung country, but I lied – there IS actually one occasion when Jester appeared to be out of the country. On 25th January, he posted the following tweet:
  350.  
  351. “To all who have DM'ed asking after my whereabouts & welfare...am safe & limbering up. It's a brave new year. TY 4 support. Stay Frosty.”
  352. https://twitter.com/#!/th3j35t3r/status/162261098035298304
  353.  
  354. His alleged location? Brescia, Italy. What about Thomas Ryan – what was he up to around this time? Well here’s the thing: between 23rd and 26th January, TR (a man who likes to tweet all day, erryday) doesn’t post a single tweet. Too busy enjoying the bruschetta, washed down with a bottle of Barolo perhaps?
  355.  
  356. A final word on correlating Twitter times before we move onto our final two points: take a look at the timeline for Jester and Tom Ryan’s tweets. Notice how they often tweet at almost exactly the same time as one another? For example, take Tuesday 10th April. After two hours without activity from either account, Thomas posts the following at 15:30pm:
  357. “Now I feel really special. Someone created a hidden stream about me and monitors it.”
  358. One minute later, at 15:31, Jester tweets “@alemarahweb‏ – ‎http://www.alemara1.com‏ – TANGO DOWN - أنا كنت”
  359. Observe any two Twitter accounts for long enough and you’ll find timing coincidences of course. However, compare Jester and Tom Ryan’s accounts on any given day and you’ll spot a predictable pattern: they always broadly correlate i.e. there is a short burst of tweets, followed by a 45 minute break while Jester/Ryan goes for a wank or to chow down some beef jerky.
  360.  
  361. Right, two more points to raise and then I’ll leave you in peace:
  362.  
  363. #17: When LulzKitten tweeted Jester’s dox on 29th March, how did Tom Ryan – the man with the military wallpaper on his Twitter page – respond? “@J_P_Holloway @lulzkitten @YourAnonNewsyou guys really suck at DOXing thinking I am@th3j35t3r everyone knows I was never in the Army #fail”
  364. https://twitter.com/#!/TomRyanBlog/status/185189598677319680
  365.  
  366. Two things stand out here: firstly, we have no way of knowing that Jester was in the army. Yes, he has an interest in all things military, but the rumor that he actively served in the army is widely believed to be false.
  367.  
  368. On 13th March however, TR tweeted the following: “When I was in the military, Greenpeace would try to board Aircraft Carriers. Some things aren't smart & never thought of till it's too late.”
  369. https://twitter.com/#!/TomRyanBlog/status/179637065154170880
  370.  
  371. Military, shmilitary; does anyone see a connection here? Thought so. Without further ado, let’s proceed to our final, fateful tweet of interest. On 10th February, Thomas Ryan tweeted the following:
  372.  
  373. “I wonder if operating Multiple Personas has ever given anyone Multiple Personality Disorder.”
  374.  
  375. I don’t know Jester, you tell me ;) Tick tock. No response? Oh well, Stay Frosty...
  376.  
  377.  
  378. **********
  379.  
  380.  
  381. POSTSCRIPT: Could it be that Tom Ryan is such an attention-whore that he’s trolling us all in the hope of being mistaken for the Jester? I guess it’s technically possible, but if so, it’s the most elaborate and painstaking trolling campaign ever conceived – and one that would have to involve the collusion of both parties. If, by some miracle, Thomas Ryan is not Jester, he knows exactly who Jester is – to the extent where he probably even vacations with him. When you review all the evidence however, there can only be one logical conclusion to draw: they are one and the same person.
  382.  
  383. On 13th March, Tom Ryan posted the following poignant message: “@ArtByAlida although Anonymous doesn't like@th3j35t3r I do. It's safer that certain people are never doxed.”
  384. https://twitter.com/#!/TomRyanBlog/status/179636120710152192
  385.  
  386. You’re right Tom – it would be safer, but the truth always comes out in the wash, don’t you find? I hope you’ve got a few passports lying around, cos you’re gonna need them. Remember those Muslim extremists whose websites you downed and whose threats you retweeted? Oh, they mad. They real mad.
  387.  
  388. One last thought before I shovel the dirt over Jester’s shriveled corpse: I notice that your Twitter nick is Boondock Saint, in tribute to The Boondock Saints, a movie about two Irish vigilantes. Just out of interest, I wonder what The Internet Surname Database would make of Thomas Ryan’s moniker?
  389.  
  390. http://www.surnamedb.com/Surname/Ryan
  391.  
  392. Why, they appear to believe that Ryan is an Irish surname. To quote from my favorite hacktivist for good, ‘Coincidence much?’
  393.  
  394. Congratulations Thomas; you just got pwned by an amateur who doesn’t even have the skills to label himself a skid, never mind a hacker. Butthurt much?
  395.  
  396. In the words of your nemesis, @anonymouSabu, “Nigga, troll harder.”
  397.  
  398. pwned by @spoolfiend
  399.  
  400.  
  401. **********
  402.  
  403. Citations:
  404.  
  405. LulzKitten tweet linking TR and J: https://twitter.com/?utm_medium=twitter&utm_source=twitterfeed#!/YourAnonNews/statuses/185150794079809536
  406.  
  407. Check when th3j35t3r and RobinSage joined Twitter: http://www.whendidyoujointwitter.com/
  408.  
  409. TR’s LinkedIn (where you’ll see proof that he attended Hacker Halted and DEFCON last year): http://www.linkedin.com/in/tommyryan
  410.  
  411. TR and J professing their love of sushi:
  412. https://twitter.com/#!/TomRyanBlog/status/178202424056610817
  413. https://twitter.com/#!/th3j35t3r/status/128849629939892224
  414.  
  415. Tom Ryan dox by AntiSec: http://pastebin.com/ZAxBWKi8
  416.  
  417. J likes to say ‘Hmmm’ a lot:
  418.  
  419. https://twitter.com/#!/th3j35t3r/status/187996120180457472
  420.  
  421. http://th3j35t3r.wordpress.com/2011/11/15/occupy-wall-street-99-ummm/
  422.  
  423. https://twitter.com/#!/th3j35t3r/status/186958030791905282
  424.  
  425. https://twitter.com/#!/th3j35t3r/status/174163673940631552
  426.  
  427. https://twitter.com/#!/th3j35t3r/status/182268058168082432
  428.  
  429. https://twitter.com/#!/th3j35t3r/status/187535767843778560
  430.  
  431.  
  432. TR also likes to say ‘Hmmm’:
  433.  
  434. https://twitter.com/#!/TomRyanBlog/status/188096685250068480
  435.  
  436. https://twitter.com/#!/TomRyanBlog/status/180117386291195906
  437.  
  438. https://twitter.com/#!/TomRyanBlog/status/178896960546287617
  439.  
  440. https://twitter.com/#!/TomRyanBlog/status/177482894443417600
  441.  
  442. https://twitter.com/#!/TomRyanBlog/status/170195932388925441
  443.  
  444. https://twitter.com/#!/TomRyanBlog/status/189680060863754241
  445.  
  446. J goes ‘Tick tock’:
  447.  
  448. https://twitter.com/#!/th3j35t3r/status/96268183723450369
  449.  
  450. https://twitter.com/#!/th3j35t3r/status/177033974324002816
  451.  
  452. https://twitter.com/#!/th3j35t3r/status/83145887307677696
  453.  
  454. https://twitter.com/#!/th3j35t3r/status/95195869921554433
  455.  
  456. https://twitter.com/#!/th3j35t3r/status/98828156663889920
  457.  
  458. http://th3j35t3r.wordpress.com/2011/06/25/lulzsecs-cloudflare-configuration/
  459.  
  460.  
  461. TR goes ‘Tick tock’:
  462.  
  463. https://twitter.com/#!/TomRyanBlog/status/174132025215811585
  464.  
  465. J ‘Stay frosty’:
  466.  
  467. https://twitter.com/#!/th3j35t3r/status/186923663734489088
  468.  
  469. https://twitter.com/#!/th3j35t3r/status/134434056925483008
  470.  
  471. https://twitter.com/#!/th3j35t3r/status/129246959021203456
  472.  
  473. https://twitter.com/#!/th3j35t3r/status/128849629939892224
  474.  
  475. https://twitter.com/#!/th3j35t3r/status/81862725638160385
  476.  
  477. https://twitter.com/#!/th3j35t3r/status/76373640832225282
  478.  
  479. TR ‘Stay frosty’:
  480.  
  481. https://twitter.com/#!/TomRyanBlog/status/189679107347460097
  482.  
  483.  https://twitter.com/#!/TomRyanBlog/status/180689040385900544
  484.  
  485. https://twitter.com/#!/TomRyanBlog/status/179655809280655361
  486.  
  487. https://twitter.com/#!/TomRyanBlog/status/179298552680415232
  488.  
  489. https://twitter.com/#!/TomRyanBlog/status/178571536691765249
  490.  
  491. https://twitter.com/#!/TomRyanBlog/status/178529239052730368
  492.  
  493. https://twitter.com/#!/TomRyanBlog/status/178336251240382464
  494.  
  495. https://twitter.com/#!/TomRyanBlog/status/179622057305317376
  496.  
  497. https://twitter.com/#!/TomRyanBlog/status/179802508372344832
  498.  
  499.  
  500. J likes to wink:
  501.  
  502. https://twitter.com/#!/th3j35t3r/status/184373769958211584
  503.  
  504. https://twitter.com/#!/th3j35t3r/status/120271829377097728
  505.  
  506. https://twitter.com/#!/th3j35t3r/status/76373640832225282
  507.  
  508. https://twitter.com/#!/th3j35t3r/status/185019516793786370
  509.  
  510. https://twitter.com/#!/th3j35t3r/status/81477469135319040
  511.  
  512. https://twitter.com/#!/th3j35t3r/status/178878010961833986
  513.  
  514. TR likes to wink:
  515.  
  516. https://twitter.com/#!/TomRyanBlog/status/187885131976024064
  517.  
  518. https://twitter.com/#!/TomRyanBlog/status/187372927946211328
  519.  
  520. https://twitter.com/#!/TomRyanBlog/status/179932280809197568
  521.  
  522. https://twitter.com/#!/TomRyanBlog/status/180689040385900544
  523.  
  524. https://twitter.com/#!/TomRyanBlog/status/189679107347460097
  525.  
  526. https://twitter.com/#!/TomRyanBlog/status/169492746871119873
  527.  
  528. https://twitter.com/#!/TomRyanBlog/status/179655809280655361
  529.  
  530. https://twitter.com/#!/TomRyanBlog/status/179802508372344832
  531.  
  532. https://twitter.com/#!/TomRyanBlog/status/179669923163938816
  533.  
  534. https://twitter.com/#!/TomRyanBlog/status/187914228810784769
  535.  
  536. J ‘much?’:
  537.  
  538. https://twitter.com/#!/th3j35t3r/status/82200919365787648
  539.  
  540. https://twitter.com/#!/th3j35t3r/status/81871769832665088
  541.  
  542. http://th3j35t3r.wordpress.com/2011/08/21/if-ya-cant-beat-em-make-some-shit-up-lmao/
  543.  
  544. TR ‘much?’:
  545.  
  546. https://twitter.com/#!/TomRyanBlog/status/179927195022659584
  547.  
  548. J ‘...’:
  549.  
  550. https://twitter.com/#!/th3j35t3r/status/189139338796351492
  551.  
  552. https://twitter.com/#!/th3j35t3r/status/186958030791905282
  553.  
  554. https://twitter.com/#!/th3j35t3r/status/186749312166932483
  555.  
  556. https://twitter.com/#!/th3j35t3r/status/128849629939892224
  557.  
  558. https://twitter.com/#!/th3j35t3r/status/138951576789331968
  559.  
  560. https://twitter.com/#!/th3j35t3r/status/168769540598145025
  561.  
  562. https://twitter.com/#!/th3j35t3r/status/179233292682407937
  563.  
  564. https://twitter.com/#!/th3j35t3r/status/184321677092597760
  565.  
  566. TR ‘...’:
  567.  
  568. https://twitter.com/#!/TomRyanBlog/status/188088227704487936
  569.  
  570. https://twitter.com/#!/TomRyanBlog/status/187342615648272384
  571.  
  572. https://twitter.com/#!/TomRyanBlog/status/188829946439929856
  573.  
  574. https://twitter.com/#!/TomRyanBlog/status/189449964219400194
  575.  
  576. https://twitter.com/#!/providesecurity/status/187253830315016192
  577.  
  578. https://twitter.com/#!/TomRyanBlog/status/189757038778269696
  579.  
  580. https://twitter.com/#!/Render64/status/187912159655772161
  581.  
  582.  
  583. J ‘<<arrows>>’:
  584.  
  585. https://twitter.com/#!/th3j35t3r/status/189463655811780609
  586.  
  587. https://twitter.com/#!/th3j35t3r/status/185019516793786370
  588.  
  589. TR ‘<<arrows>>’:
  590.  
  591. https://twitter.com/#!/TomRyanBlog/status/179683104972210176
  592.  
  593. https://twitter.com/#!/TomRyanBlog/status/188096685250068480
  594.  
  595. https://twitter.com/#!/TomRyanBlog/status/177907983227949056
  596.  
  597. https://twitter.com/#!/TomRyanBlog/status/178555495806803968
  598.  
  599. https://twitter.com/#!/TomRyanBlog/status/179321093897723904
  600.  
  601.  
  602. J using UPPER case:
  603.  
  604. https://twitter.com/#!/th3j35t3r/status/189165520556277761  
  605.  
  606. https://twitter.com/#!/th3j35t3r/status/178895612723478531
  607.  
  608. https://twitter.com/#!/th3j35t3r/status/181438361511280640
  609.  
  610. https://twitter.com/#!/th3j35t3r/status/82538803188862976
  611.  
  612. https://twitter.com/#!/th3j35t3r/status/98386681836736512
  613.  
  614. https://twitter.com/#!/th3j35t3r/status/177544329458491392
  615.  
  616. https://twitter.com/#!/th3j35t3r/status/135438221483048960
  617.  
  618. https://twitter.com/#!/th3j35t3r/status/177568887334903808
  619.  
  620. https://twitter.com/#!/th3j35t3r/status/110676313366462464
  621.  
  622. https://twitter.com/#!/th3j35t3r/status/127396730621788160
  623.  
  624. https://twitter.com/#!/th3j35t3r/status/100282273072549890
  625.  
  626. https://twitter.com/#!/th3j35t3r/status/178566407909412866
  627.  
  628. https://twitter.com/#!/th3j35t3r/status/132173511874711552
  629.  
  630. https://twitter.com/#!/th3j35t3r/status/94485325744848896
  631.  
  632. https://twitter.com/#!/th3j35t3r/status/97333572955947008
  633.  
  634. https://twitter.com/#!/th3j35t3r/status/91970882095943680
  635.  
  636. https://twitter.com/#!/th3j35t3r/status/141002481260961792
  637.  
  638.  
  639. TR using UPPER case:
  640.  
  641. https://twitter.com/#!/TomRyanBlog/status/187908914417893379
  642.  
  643. https://twitter.com/#!/TomRyanBlog/status/188461215348031489
  644.  
  645. https://twitter.com/#!/TomRyanBlog/status/187018163567853568
  646.  
  647. https://twitter.com/#!/TomRyanBlog/status/185423913197637633
  648.  
  649. https://twitter.com/#!/TomRyanBlog/status/187240901574266881
  650.  
  651. https://twitter.com/#!/TomRyanBlog/status/180380942614016001
  652.  
  653. https://twitter.com/#!/TomRyanBlog/status/187903623693467648
  654.  
  655. https://twitter.com/#!/TomRyanBlog/status/187361681452699649
  656.  
  657. https://twitter.com/#!/TomRyanBlog/status/187541167972417536
  658.  
  659. https://twitter.com/#!/TomRyanBlog/status/187322975383588864
  660.  
  661. https://twitter.com/#!/TomRyanBlog/status/187309018623127552
  662.  
  663. https://twitter.com/#!/TomRyanBlog/status/187558445036216320
  664.  
  665. https://twitter.com/#!/TomRyanBlog/status/187541167972417536
  666.  
  667. https://twitter.com/#!/TomRyanBlog/status/187656738818899968
  668.  
  669. https://twitter.com/#!/TomRyanBlog/status/187261297669308416
  670.  
  671. https://twitter.com/#!/TomRyanBlog/status/187530160134828032
  672.  
  673. https://twitter.com/#!/TomRyanBlog/status/184620737821286402
  674.  
  675.  
  676. Jester ‘LMAO!’:
  677.  
  678. https://twitter.com/#!/th3j35t3r/status/105305979733815296
  679.  
  680. TR ‘ROFLMAO!’:
  681.  
  682. https://twitter.com/#!/TomRyanBlog/status/180709354624925696
  683.  
  684. https://twitter.com/#!/TomRyanBlog/status/179773457943371776
  685.  
  686. https://twitter.com/#!/TomRyanBlog/status/187709243087003650
  687.  
  688. https://twitter.com/#!/TomRyanBlog/status/186965988082843648
  689.  
  690. https://twitter.com/#!/TomRyanBlog/status/187272732147322880
  691.  
  692. https://twitter.com/#!/TomRyanBlog/status/187583747154132992
  693.  
  694.  
  695. J struggles with apostrophes:
  696.  
  697. https://twitter.com/#!/th3j35t3r/status/83239272504770560
  698.  
  699. https://twitter.com/#!/th3j35t3r/status/177080046597578752
  700.  
  701. https://twitter.com/#!/th3j35t3r/status/186749312166932483
  702.  
  703. (See his blog for heaps more examples.)
  704.  
  705. http://www.youtube.com/watch?v=WeO44IWlkfU (Skip to 5:07); ‘lets’, ‘its’ and ‘Thats’ should all have apostrophes.
  706.  
  707. http://www.youtube.com/watch?v=yJTvzErKHWE Look at the Notepad he’s typing into: ‘lets’ should have an apostrophe and ‘peak’ should have two ‘e’s in it. Skip to 2:20: the text on Jester’s self-designed Xerxes machine also contains typos: ‘SUCCESFULLY’ should have two ‘s’ in the middle. At 2:29, you’ll see that ‘Secured’ has also been spelt wrongly. At 6:52 he also types the same misspelt word into Notepad.
  708.  
  709. TR also struggles with apostrophes:
  710.  
  711. https://twitter.com/#!/TomRyanBlog/status/187920367845781504
  712.  
  713. https://twitter.com/#!/TomRyanBlog/status/187710784690855936
  714.  
  715. https://twitter.com/#!/TomRyanBlog/status/180432605680902144
  716.  
  717. https://twitter.com/#!/TomRyanBlog/status/187645320442822656
  718.  
  719. https://twitter.com/#!/TomRyanBlog/status/187531807598714880
  720.  
  721. https://twitter.com/#!/TomRyanBlog/status/187917710498336769
  722.  
  723. https://twitter.com/#!/TomRyanBlog/status/185737304290234368
  724.  
  725. https://twitter.com/#!/TomRyanBlog/status/178485680899502081
  726.  
  727.  
  728. J tweets ‘TANGO DOWN’:
  729.  
  730. https://twitter.com/#!/th3j35t3r/status/175040242477318144
  731.  
  732. https://twitter.com/#!/th3j35t3r/status/175029005718794240
  733.  
  734. TR tweets ‘TANGO DOWN’:
  735.  
  736. https://twitter.com/#!/TomRyanBlog/status/186482996352778240
  737.  
  738. https://twitter.com/#!/TomRyanBlog/status/186482690797744128
  739.  
  740. J always writes numbers numerically:
  741.  
  742. https://twitter.com/#!/th3j35t3r/status/174540542724669441
  743.  
  744. https://twitter.com/#!/th3j35t3r/status/93771304607563776
  745.  
  746. https://twitter.com/#!/th3j35t3r/status/114830590452310016
  747.  
  748. https://twitter.com/#!/th3j35t3r/status/134434056925483008
  749.  
  750. https://twitter.com/#!/th3j35t3r/status/140925221090758656
  751.  
  752. https://twitter.com/#!/TomRyanBlog/status/185576329712910336
  753.  
  754.  
  755. TRB always writes numbers numerically:
  756.  
  757. https://twitter.com/#!/TomRyanBlog/status/187211721365139456
  758.  
  759. https://twitter.com/#!/TomRyanBlog/status/187712594373648384
  760.  
  761. https://twitter.com/#!/TomRyanBlog/status/178965908696481793
  762.  
  763. https://twitter.com/#!/TomRyanBlog/status/187680293984022529
  764.  
  765. https://twitter.com/#!/TomRyanBlog/status/187539614876176384
  766.  
  767. Compare TR and J’s tweet patterns, in particular the time of day they tweet at and the hashtags they use: http://tweetstats.com (Open two separate windows and enter their Twitter names).
  768.  
  769. J using #Fail:
  770.  
  771. https://twitter.com/#!/th3j35t3r/status/132152349639720960
  772.  
  773. https://twitter.com/#!/th3j35t3r/status/103200916156588032
  774.  
  775. https://twitter.com/#!/th3j35t3r/status/102784136015646722
  776.  
  777. https://twitter.com/#!/th3j35t3r/status/97030633330716674
  778.  
  779. https://twitter.com/#!/th3j35t3r/status/178966110694150144
  780.  
  781.  
  782. J using #Fail:
  783.  
  784. https://twitter.com/#!/TomRyanBlog/status/187708057344671744
  785.  
  786. https://twitter.com/#!/TomRyanBlog/status/167697098047889411
  787.  
  788. https://twitter.com/#!/TomRyanBlog/status/177978089203175424
  789.  
  790. https://twitter.com/#!/TomRyanBlog/status/178269119316107264
  791.  
  792. https://twitter.com/#!/TomRyanBlog/status/186927307544477697
  793.  
  794. https://twitter.com/#!/TomRyanBlog/status/178573080438898689
  795.  
  796. https://twitter.com/#!/TomRyanBlog/status/178982123959619585
  797.  
  798. https://twitter.com/#!/TomRyanBlog/status/185189598677319680
  799.  
  800. https://twitter.com/#!/TomRyanBlog/status/186930868273676288
  801.  
  802. https://twitter.com/#!/TomRyanBlog/status/186965988082843648
  803.  
  804.  
  805. J using #Justsayin: https://twitter.com/#!/th3j35t3r/status/76373640832225282
  806.  
  807. TRB using #Justsayin:
  808. https://twitter.com/#!/TomRyanBlog/status/177907983227949056
  809.  
  810. https://twitter.com/#!/TomRyanBlog/status/179578215411630080
  811.  
  812. https://twitter.com/#!/TomRyanBlog/status/178518183525888000
  813.  
  814. https://twitter.com/#!/TomRyanBlog/status/184620737821286402
  815.  
  816. https://twitter.com/#!/TomRyanBlog/status/184270112361168898