Perfect!

Epik long has been the favorite Internet company of the far-right, providing domain services to QAnon theorists, Proud Boys and other instigators of the Jan. 6 attack on the U.S. Capitol — allowing them to broadcast hateful messages from behind a veil of anonymity.

But that veil abruptly vanished last week when a huge breach by the hacker group Anonymous dumped into public view more than ten gigabytes of previously private data — including user names, passwords and other identifying information of Epik’s customers.

Rosetta Stone to the far-right

Extremism researchers and political opponents have treated the leak as a Rosetta Stone to the far-right, helping them to decode who has been doing what with whom over several years. Initial revelations have spilled out steadily across Twitter since news of the hack broke last week, often the hashtag #epikfail, but those studying the material say they will need months and perhaps years to dig through all of it.

Epik, based in the Seattle suburb of Sammamish, has made its name in the Internet world by providing critical Web services to sites that have run afoul of other companies’ policies against hate speech, misinformation and advocating violence. Its client list is a roll-call of sites known for permitting extreme posts and that have been rejected by other companies for their failure to moderate what their users post.

Online records show those sites have included 8chan, which was dropped by its providers after hosting the manifesto of a gunman who killed 51 Muslims in Christchurch, New Zealand, in 2019; Gab, which was dropped for hosting the antisemitic rants of a gunman who killed people in a Pittsburgh synagogue in 2018; and Parler, which was dropped due to lax moderation related to the Jan. 6 Capitol attack.

"It's an embarrassment of riches- stress on the embarrassment."

“It’s massive. It may be the biggest domain-style leak I’ve seen and, as an extremism researcher, it’s certainly the most interesting,” said Megan Squire, a computer science professor at Elon University who studies right-wing extremism. “It’s an embarrassment of riches — stress on the embarrassment.”

TheDonald’s owner speaks out on why he finally pulled plug on hate-filled site
Epik also provides services to a network of sites devoted to extremist QAnon conspiracy theories. Epik briefly hosted the neo-Nazi site Daily Stormer in 2019 after acquiring a cybersecurity company that had provided it with hosting services, but Epik soon canceled that contract, according to news reports. Epik also stopped supporting 8chan after a short period of time, the company has said.

Earlier this month, Epik also briefly provided service to the antiabortion group Texas Right to Life, whose website, ProLifeWhistleblower.com, was removed by the hosting service GoDaddy because it solicited accusations about which medical providers might be violating a state abortion ban.

An Epik attorney said the company stopped working with the site because it violated company rules against collecting people’s private information. Online records show Epik was still the site’s domain registrar as of last week, though the digital tip line is no longer available, and the site now redirects to the group’s homepage.

Epik founder Robert Monster’s willingness to provide technical support to online sanctuaries of the far-right have made him a regular target of anti-extremism advocates, who criticized him for using Epik’s tools to republish the Christchurch gunman’s manifesto and live-streamed video the killer had made of the slaughter.

Monster also used the moment as a marketing opportunity, saying the files were now “effectively uncensorable,” according to screenshots of his tweets and Gab posts from the time. Monster also urged Epik employees to watch the video, which he said would convince them it was faked, Bloomberg News reported.

Monster has defended his work as critical to keeping the Internet uncensored and free, aligning himself with conservative critics who argue that leading technology companies such as Facebook, Twitter, Amazon and YouTube have gone too far in policing content they deem inappropriate.

Biden’s domestic terrorism strategy details unprecedented focus on homegrown threats
Monster did not respond to requests for comment from The Washington Post. But he said in an email to customers two days after hackers announced the breach that the company had suffered an “alleged security incident” and asked customers to report back any “unusual account activity.”

“You are in our prayers today,” Monster wrote last week, as news of the hack spread. “When situations arise where individuals might not have honorable intentions, I pray for them. I believe that what the enemy intends for evil, God invariably transforms into good. Blessings to you all.”

The worse trash the Internet has to offer.

Since the hack, Epik’s security protocols have been the target of ridicule among researchers, who’ve marveled at the site’s apparent failure to take basic security precautions, such as routine encryption that could have protected data about its customers from becoming public.

The files include years of website purchase records, internal company emails and customer account credentials revealing who administers some of the biggest far-right websites. The data includes client names, home addresses, email addresses, phone numbers and passwords left in plain, readable text. The hack even exposed the personal records from Anonymize, a privacy service Epik offered to customers wanting to conceal their identity.

The breach, first reported by the freelance journalist Steven Monacelli, was made publicly available for download last week alongside a note from Anonymous hackers saying it would help researchers trace the ownership and management of “the worst trash the Internet has to offer.”

[washingtonpost.com]