You know if he is legit, just upload a password protected file where you can see date uploaded, or even a torrent and don't release password until AFTER events have taken place. File lists specifics and not just generalities.