Kevin McDonald

@sudorandom@infosec.exchange
232 Followers
78 Following
947 Posts

Software Engineer. I post about backend programming, and nonsense. โ€ฉ๐Ÿ‡บ๐Ÿ‡ธ living in ๐Ÿ‡ฉ๐Ÿ‡ฐโ€ฉ

https://kmcd.dev

LanguagesEnglish, Danish (beginner)
Interestsprogramming, doing weird things with data, video games, board games
Websitehttps://kmcd.dev

[[important update: It appears there is a critical error in my previous analysis. The email address returned by Constella for that 12 digit was actually sergio-gor@gmail.com, not sergio.gor@gmail.com (the latter being the address that registered steveking.com back in the day). Please accept my apologies for this horrible oversight on my part.]]

So I've been looking at this guy Sergio Gor, who's been described as one of the most powerful figures in the Trump administration: Director of the White House Office of Presidential Personnel.

Per The Times of Malta:

"While not the most glamourous sounding position, Gorโ€™s role will see him wield considerable influence in the Trump government, responsible for vetting the appointment of thousands of employees.

https://timesofmalta.com/article/meet-sergio-gor-the-maltese-man-heart-trump-administration.1104244

Meanwhile, The New York Post wrote on June 17 that Gor still hasn't been vetted himself:

"...three administration insiders told The Post that the vetter-in-chief has not turned in his Standard Form 86, or SF-86 โ€” a more than 100-page set of questions required for officials who need security clearances."

"Among the questions applicants must answer under threat of criminal penalties is where they were born and whether they have any foreign connections."

"Gor claims to be from the island country of Malta, though an official there could not confirm his birthplace when provided his exact birthday, saying: โ€œNo acts are registered with the provided details.โ€

"Gor declined to divulge his birthplace to The Post, other than to say it was not Russia."

His Wikipedia page says he was born in 1986 in Malta, and later moved w/ family to Los Angeles. But there indications he was born in Russia in 1980.

https://en.m.wikipedia.org/wiki/Sergio_Gor

Sergio Gor is known to have worked on the campaign of the conservative former Rep. Steve King, and a search in Domaintools finds Sergio Gor registered Steveking.com way back when. Domaintools says Gor used the email address sergio.gor@gmail.com, which was also used to register the vanity domain sergiogor.com.

Constella Intelligence, a threat hunting platform that indexes breached data, finds this email address used the rather unique and long password: 961649507273. Constella further finds that this password is almost exclusively tied to a bunch of email accounts for the same name, including sgoryachev999@rambler.ru, goryachev-sergey@yandex.ru, sergio-gor@yandex.ru
sergio-gor@qip.ru, goryachev-sergey@ya.ru, goryachev-sergey@list.ru and goryachev-sergey@gmail.com.

Constella also says goryachev-sergey@yandex.ru has multiple entries in Russian government databases for a Sergey Anatolyevich Goryachev, DOB, Nov. 20, 1980, phone +79689210000. This person appears to have lived in Saratov, RU, has a tax ID number, etc.

Here's a mind map I put together on these findings. The password thing is very hard to get past.

I do have a followup for my little phreak game that I will drop when I am back from vacation. It will require less physical effort but oddly may be more frustrating.
@bobthomson70 @sudorandom
for podcast fans, anti-fascist + every wednesday:
https://www.2600.com/offthehook/
offthehook | 2600

@sudorandom Hence 2600 magazine, which everyone who is interested, and can afford to should get a subscription for I think as we need to support these remaining print mags if we can IMHO

https://www.2600.com/

2600 News | 2600

"Honey what did you do today?"
"I made hundreds of nerds whistle into their phones"

I got some feedback that I should add the British version (2280 Hz), so I did. This note appears to be harder for my wife to get! Good Luck, Phreakers!

Lore: https://www.britishtelephones.com/pwover1.htm

UK SIGNALLING SYSTEMS OVERVIEW

UK SIGNALLING SYSTEMS OVERVIEW

Long before the internet, some phone networks were hackable by playing a single tone at 2600Hz.

Whistled into a phone, it could grant you unrestricted access. Do you have the vocal chops to be an old-school phone phreak?

I built a web app to test your ability to produce the legendary frequency. You won't get free long distance calls but you will get some honor in the knowledge that you could have been a cool hacker. ๐Ÿ˜Ž

I am sad to say that I can only whistle up to 1100Hz... But my wife (a long time woodwind player) is able to consistently get it.

Give it a try: https://phreak.kmcd.dev/

#phreaking #2600Hz #bluebox #RetroComputing #hacker #infosec #Tech

Phone Phreak Emulator

Test your phreaking skills by hacking this phone line.

It's Tuesday! Time for your daily dose of Normal wordy goodness.

๐Ÿ‡ฉ ๐Ÿ‡ท ๐Ÿ‡ฎ ๐Ÿ‡น
๐Ÿ‡น ๐Ÿ‡จ ๐Ÿ‡ฉ ๐Ÿ‡ช
๐Ÿ‡ณ ๐Ÿ‡น ๐Ÿ‡ท ๐Ÿ‡ฎ

Find the words: https://wordseq.com/daily/normal/2025-06-17
#WordGames #BrainTeaser

wordseq - Daily Letter Swap Challenge!

Swap letters, forge words, and conquer the daily wordseq puzzle! Can you find the optimal path?

wordseq

Ready for a Monday Hard word hunt? ๐Ÿ•ต๏ธโ€โ™€๏ธ

๐Ÿ‡น ๐Ÿ‡ด ๐Ÿ‡ญ ๐Ÿ‡ฐ
๐Ÿ‡ฌ ๐Ÿ‡ฆ ๐Ÿ‡ช ๐Ÿ‡ฒ
๐Ÿ‡ฆ ๐Ÿ‡ฒ ๐Ÿ‡ฒ ๐Ÿ‡ฌ
๐Ÿ‡ช ๐Ÿ‡ญ ๐Ÿ‡น ๐Ÿ‡ผ

Find them all: https://wordseq.com/daily/hard/2025-06-16
#WordDetective #PuzzleGrid

wordseq - Daily Letter Swap Challenge!

Swap letters, forge words, and conquer the daily wordseq puzzle! Can you find the optimal path?

wordseq
Blog post detailing the story behind this map: https://kmcd.dev/posts/internet-map-2025/
Visualizing the Internet (2025)

An all-new interactive map of the Internet, showing the evolution of undersea cables and internet exchanges with year-by-year animation and detailed statistics.

kmcd.dev