RussiaGate Dissent: Myths and Misconceptions
By Tim Leonard — August 30, 2025
By Tim Leonard — August 30, 2025
False claims about the DNC email exfiltration continue to circulate, often because Forensicator’s original research has been blurred together with subsequent commentary by others, including Bill Binney.
Forensicator, an anonymous independent researcher, was the first to analyze the relevant metadata and set out the technical findings. Binney, a former NSA official, later highlighted this research in challenging the Russiagate narrative. However, some of his public statements framed the findings more strongly than the underlying analysis supported. Over time, those amplified interpretations have been repeated as if they reflected Forensicator’s work directly, when in fact they do not.[1]
This matters. Recycling flawed interpretations and false statements doesn’t strengthen legitimate skepticism about Russiagate; it weakens it. To uncover the truth, we need to focus on the primary forensic evidence - not on simplified or distorted retellings.
Below, we break down the most common myths, grounded firmly in what the original forensic data actually shows.
MYTH: "The DNC's emails were transferred too fast for remote exfiltration."
FACT: In reality, the emails moved at a modest ~350kb/s. The much faster ~23Mb/s speeds often cited came from an unrelated NGP-VAN archive - not the DNC emails.[2][3]
MYTH: "The DNC emails were proven to have been exfiltrated via thumb drive."
FACT: Some emails showed a “FAT-like” timestamp pattern, but this can result from basic/older ZIP implementations or post-exfiltration copying. It is not definitive proof of a thumb drive being used.[3][6]
MYTH: "Guccifer 2.0 exfiltrated NGP-VAN data too fast for the Internet."
FACT: Forensicator didn't claim that this was exfiltration and dissented against this interpretation of his analysis.[4] The observed activity could easily have been post-exfiltration activity. The “too fast” remark was just a passing observation in a conclusion that actually concerned practical tests showing disk-writing rates consistent with thumb drive transfers, not remote exfiltration.[2][5]
Recycled myths and misconceptions only blur the picture. To get clarity, it’s essential to return to the source: the original digital forensics analysis.
Second-hand interpretations, however well-intentioned, can distort the facts. By reviewing the original analyses, we can separate myth from reality and see Russiagate more clearly.
For readers interested in a wider view of independent research into Guccifer 2.0 (including Forensicator’s discoveries), a summary is available here.
This article is not a criticism of individuals who have repeated flawed claims. The examples cited in footnotes are just a small glimpse of a broader pattern. In most cases, people are simply repeating details without direct familiarity with the evidence. The goal here is to encourage a closer look at the facts themselves.