ryan fae (@ryanfae.bsky.social on 🦋)

investigative reporter / OSINTer (contribs @GeoConfirmed @VirtualStreets_, edits @awawawhoami)
signal rhinozz.1337

+ hobbyist musician @sounds_wav @synefields

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

SCOOP: two sources gave me 3,600 name–email pairs of donors to pro-Israel and right-wing organizations. 2,700 pairs are from donors to the IDF-benefitting "Helping Israel Fund," which includes Pace University Law Dean Horace Anderson and NJIT Athletic Director Lenny Kaplan.

🧵

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@hannahwithfur happy belated hannah!!

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

listen to this podcast series! it's terrific. thomas, gabòr, and i along with the folks at bellingcat (esp jake) started working on the geolocation years ago now, and the CNN/BBC/NPR team here did an amazing, amazing job

[Thomas Bordeaux @ThomasBordeaux7]

@Gabor_Friesen @GeoConfirmed Gabor and I worked with Josh Baker and Sara Obeidat on this, as part of their search for Austin Tice - you can listen to the podcast they made for the BBC and NPR, about the search, as well as their visit to these locations, here: https://t.co/OQDszre5iC

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@luciascarlet @usgraphics tbh i had trouble parsing it. it's rather choppy on all devices and browsers i tried on which definitely contributes. but a cool site nonetheless

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@I_Am_CyberSmith @cutiebbsparkles @awawawhoami cybersmith, i have bad news for you

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@doggyketamine HII text me we gotta catch up

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@doggyketamine real shit

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@SwallowBug11 @meowingcrimes PLEASE

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

...

[maia arson crimew 🐈 @awawawhoami]

one day my editor will understand the genius of putting really long and at best tangentially related sentences (with multiple asides) in an investigative blog post

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@rebane2001 wait that's me

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@Armonte the only available geographic data is in the stripe dataset, which only covers transactions across 27 hours. the U.S. sample size is so limited that it just isn't useful unfortunately

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

earlier this month, i obtained 102 internal git repositories from music ai company Suno, which was hacked in November.

that source code is now being released through DDoSecrets in the public interest.

https://t.co/Ia2GOrCnYL

🧵

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

other reporters: i can get you started on this data. text me on signal at rhinozz.1337.

(i don't post much here anymore, but i believe it is in the public interest to post this on a site which more frequently discusses AI. follow me on 🦋for more where this came from.)

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

the data was shared with me by the hacker this month. the user records were also separately provided to @troyhunt.

https://t.co/XGRRVEE4N6

[Have I Been Pwned @haveibeenpwned]

New breach: Data from Suno's November 2025 breach surfaced publicly last week. The corpus contained over 55M unique email addresses plus tens of thousands of Stripe payment records. 24% were already in @haveibeenpwned. More: https://t.co/RRDVGN5zFF

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@plushie_faggot is it?? its reheated ftc-rule-that-8th-circuit-struck-down nachos

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

GANG. we smashed scarlet's goal (thank you!!), but it's NOT OVER YET for them.

her fiancée's been in and out of the ER repeatedly over the last few weeks. they still need more money for soon-to-come medical bills. help her out <3

https://t.co/6oBrV5VMmx

[scarlet @_frierenthemage]

thank you all so much for the support !!! me and fiancée were sobbing watching the donations come in. we still have a couple grand in medical bills coming soon so anything more helps

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

scarlet was kicked out by family for being a trans woman, and her fiancée's health is deteriorating. she needs money for housing and gas so her fiancée can work.

boosts + qrts on original post appreciated :))

https://t.co/6oBrV5VMmx

[scarlet @_frierenthemage]

hi im a 19yo trans girl in southern michigan. i was kicked out a month ago by my transphobic grandparents and now im living out of my car with my fiancée. she has been in the er four times in the last three weeks and we need money to survive.
pls donate https://t.co/Qy33dsTcAR

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

new fun one! edit by me as per usual ✨

[maia arson crimew 🐈 @awawawhoami]

NEW BLOG POST: How To Add DRM To Your Backend (easy) [2026 WORKING]

Ever wondered how KineMaster stopped some modded clients from accessing their asset market?

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

@ManyMo17 cannot share per source agreement, apologies

[ryan fae (@ryanfae.bsky.social on 🦋) @RhinozzCode]

SCOOP: a vulnerability in the animation app FlipaClip exposed the email, birthdate, full name, and country of 895,000 users. 22% of users in the dataset, which is non-public, are minors.

Josh Ward of VisualBlasters, FlipaClip's developer, tells me that it was "fully rectified."