well so yeah.. the white hat hacker that testified also testified that he captured the data. This means that the white hats HAD ACCESS TO ONE OF THE FOLLOWING!!!! another node on the same switch configured to promiscuous mode.. to sniff the packets. a proxy server that was in line of the down stream communications. the vpn network used if any was used to make the connection the main router or gateway of the traffic the ISP gateway or network the NSA access points etc. -- knowing he had access to that, what code monkey told us becomes VERY IMPORTANT!!!!! remember when code monkey mentioned that in the user guide when you are importing the certificates, to use no password for the hash? also he told us that all of the machines use the same exact private key. So if the white hat hackers had access to sniff these packets, then its reasonable to consider that they could have also used a MITM attack to record the entire thing for playback at a later date. This is also consistent with the claim that there was a server stolen, because it would not be hard to figure out at least to a certain degree where the location of the server was by following the traceroute. this means THE WHITE HAT HACKERS PROBABLY HAVE IT FUCKING ALLLLLLL!!! even more than they have brought up publicly at this point.