someone posting an ARG in 2019, lol

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > someone posting an ARG in 2019, lol

«‹›4 »

cinni: Oct 17, 2008; by Jeffrey of YOSPOS

The game manager asks, "please unban the saphirecalypso account."

poofs off into oblivion

# ? Jul 24, 2019 05:07

Adbot: ADBOT LOVES YOU

# ? May 9, 2024 11:54

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

lol

# ? Jul 24, 2019 05:18

pseudorandom: Jun 16, 2010; Yam Slacker

Sirotan posted:

so password is 97803453238809780877283348 ?

this does not work with rabbitHole or rabbitHole_2016

edit: could not find a winning combo but now it is time for sleep, goodnight op(s) and i'll pick this up tomorrow

For http://purplewaterbottle.com/saphirecalypso/:

Username is "saphirecalypso",
Your password is correct: "97803453238809780877283348"

quote:

<html>
<head>

</head>
<body>

<img src="itIsNotTimeYet.png"></img>
<BR><BR>
Please share this experience with others.

<br><br>

The next round will test a different type of skillset.

Excellent job.

</body>
</html>

Note: the PNG link currently just goes to a 404 page.

pseudorandom fucked around with this message at 20:19 on Jul 24, 2019

# ? Jul 24, 2019 05:54

pseudorandom: Jun 16, 2010; Yam Slacker

ROT13 of the comment:

quote:

The first of august two thousand and nineteen will be when the next round begins. Congratulations on your efforts.

# ? Jul 24, 2019 05:56

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

# ? Jul 24, 2019 06:01

cZk: Oct 6, 2014; i am a flight risk
and i am in flight

hey awesome you guys got it!

haha Sirotan and I were just talking to ourselves in that other thread

# ? Jul 24, 2019 06:21

eschaton: Mar 7, 2007; Don't you just hate when you wind up in a store with people who are in a socioeconomic class that is pretty obviously about two levels lower than your own?

is my copy of Designing Compelling Worm Sanctuaries going to be useful here?

# ? Jul 24, 2019 07:02

Moo Cowabunga: Jun 15, 2009; [Office Worker.

don�t cry for me ARGentina

# ? Jul 24, 2019 07:30

Sirotan: Oct 17, 2006; Sirotan is a seal.

pseudorandom posted:

For http://purplewaterbottle.com/saphirecalypso/:

Username is "saphirecalypso",
Your password is correct: "97803453238809780877283348"

Note: the PNG link currently just goes to a 404 page.

aw dang I was so close last night. this page now seems to have been deleted :spooky:

# ? Jul 24, 2019 11:12

Potato Salad: Oct 23, 2014; nobody cares

Sirotan posted:

those fuckers are mocking us now

Who, in 2019, even knows SA exists

# ? Jul 24, 2019 13:05

Sirotan: Oct 17, 2006; Sirotan is a seal.

cinni posted:

The game manager asks, "please unban the saphirecalypso account."

poofs off into oblivion

mods

# ? Jul 24, 2019 13:28

BlankSystemDaemon: Mar 13, 2009

anyone who was at blackhat 2010 was in bed with robin sage

# ? Jul 24, 2019 16:57

pram: Jun 10, 2001

pseudorandom posted:

ROT13 of the comment:

the magic and the mystery of a lazy, unfinished arg

# ? Jul 24, 2019 16:59

BlankSystemDaemon: Mar 13, 2009

pram posted:

the magic and the mystery of a lazy, unfinished arg

thats all of them, except the ones where it turns out it was all a a cynical attempt to sell something

# ? Jul 24, 2019 17:23

CRIP EATIN BREAD: Jun 24, 2002; Hey stop worrying bout my acting bitch, and worry about your WACK ass music. In the mean time... Eat a hot bowl of Dicks! Ice T; Soiled Meat

what a lame ARG

took what, a whole day to figure it out?

# ? Jul 24, 2019 18:32

pseudorandom: Jun 16, 2010; Yam Slacker

Sirotan posted:

this page now seems to have been deleted

No, I'm just dumb and included the colon in the url tags; I just fixed the link.

# ? Jul 24, 2019 20:21

suffix: Jul 27, 2013; Wheeee!

cool

# ? Jul 24, 2019 20:46

PacificV1: Sep 8, 2007; WHY ARE YOU READING THIS

I stopped yesterday since I googled the repo name and got to the youtube video and basically solved everything from there until I was given an IP (with a path) with no ports open that I can see except ssh. I got that IP from a dinosaur. But that page yesterday instructed everyone to keep secrets, while now they're asking the exact opposite? I'm confused. Considering that whole page got replaced today with a timer I wonder if the server was even ready, but that's assuming too much incompetence.

What do people think the EC keys are for, anyway? They're the wrong curve for being an ssh key, I think, and doing encryption/decryption with EC curves is strange. I haven't solved anything in relation to the AES stuff, nor do I understand how FIN;PSH = nextpass works. Is nextpass 7169:8193(1024)? Are we supposed to try and send a packet with size 1024 for that IP to respond via port 80?

# ? Jul 24, 2019 22:44

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

i don't understand the relevance of half the things we found, so either there are millions of red herrings or they're front-loading info which will be useful later or we accidentally stumbled off course and it all fell apart and had to be delayed

# ? Jul 24, 2019 23:14

Gildiss: Aug 24, 2010; Grimey Drawer

Rufus Ping posted:

i don't understand the relevance of half the things we found, so either there are millions of red herrings or they're front-loading info which will be useful later or we accidentally stumbled off course and it all fell apart and had to be delayed

BE SURE TO DRINK YOUR OVALTINE

# ? Jul 24, 2019 23:17

Partycat: Oct 25, 2004

well if it is unfinished then presumably it either was or is frontloading

regarding the keys can SSH use ECDSA yet? I don�t see why that wouldn�t work if you can do non RSA/DSA for other key exchanges

# ? Jul 24, 2019 23:31

saphirecalypso: Jul 23, 2019; by FactsAreUseless

This forum is fruitful, useful, and fine.
Its population is skilled, turning on a dime.
Twitter was a disappointment, imgur not able.
4chan plain terrible, no skill at the table.
Reddit was youthful, and tried as it might.
But, FVEY and APT39 seem best in this fight.

Analytics tells us all, hidden worlds unknown.
Continue the game, as you have been told.

Find Robin Sage. All is finished before the start.

家庭，

你做得很好。坚持下去。落入兔子巢穴后会导致黄金。

时间不是线性的。匆匆前进，奖品很快被捕获。

学生很快加入，现实世界崩溃。传单已经发布，这个游戏现在将扩展。

8月1日

Gao ci.

D2184EFB8CE04650

# ? Jul 24, 2019 23:43

Potato Salad: Oct 23, 2014; nobody cares

I, too, am gay.

# ? Jul 24, 2019 23:53

Garrand: Dec 28, 2012; Rhino, you did this to me!

I will be sorely disappointed if this ARG doesn't in with goatse in some fashion

# ? Jul 25, 2019 00:01

PacificV1: Sep 8, 2007; WHY ARE YOU READING THIS

So both the translated chinese post above and the second image on the README on the repo (https://github.com/saphirecalypso/F2D64AD97033074E/commit/30b1c832cb227deaabf99e2c49d5e3ec268a9722, https://pastebin.com/nfUTt4MG after rot13, but I might've misspelled something) as well as the readme itself suggest the 1st of august date is another red herring to be ignored, and to keep hunting for ditches. Curiously, all the numbers are GPS locations to multiple locations with "ditch" in the name in the US, including a bar. There's also a new string on the readme, seems it was encrypted with something. We still don't have an AES-256 key, right?

# ? Jul 25, 2019 00:48

Jonny 290: May 5, 2005; [ASK] me about OS/2 Warp

lol at this entire thread

# ? Jul 25, 2019 00:57

suffix: Jul 27, 2013; Wheeee!

PacificV1 posted:

So both the translated chinese post above and the second image on the README on the repo (https://github.com/saphirecalypso/F2D64AD97033074E/commit/30b1c832cb227deaabf99e2c49d5e3ec268a9722, https://pastebin.com/nfUTt4MG after rot13, but I might've misspelled something) as well as the readme itself suggest the 1st of august date is another red herring to be ignored, and to keep hunting for ditches. Curiously, all the numbers are GPS locations to multiple locations with "ditch" in the name in the US, including a bar. There's also a new string on the readme, seems it was encrypted with something. We still don't have an AES-256 key, right?

looks like you got one in the readme now? or at least it's 32 bytes

e: tried it on meat and carrots in ecb and cbc mode but got nothing

suffix fucked around with this message at 01:33 on Jul 25, 2019

# ? Jul 25, 2019 01:16

PacificV1: Sep 8, 2007; WHY ARE YOU READING THIS

suffix posted:

looks like you got one in the readme now? or at least it's 32 bytes

e: tried it on meat and carrots in ecb and cbc mode but got nothing

Unfortunately no, a aes256 key is 64 characters long. I don't know what that is, I guess it's something to use the aes key in. There's a lot of unresolved stuff still, so the key should still be somewhere. They've rewrote history on the repo, though. The image isn't there anymore, but it's still on their imgur profile.

# ? Jul 25, 2019 02:04

suffix: Jul 27, 2013; Wheeee!

count again imo, i think they changed it (and blew away the previous history)

# ? Jul 25, 2019 02:29

Volmarias: Dec 31, 2002; EMAIL... THE INTERNET... SEARCH ENGINES...

This is going to be for Season 4 of Mr. Robot and you're going to win a video of Christian Slater telling you that you're all bug smelly nerds

# ? Jul 25, 2019 02:48

suffix: Jul 27, 2013; Wheeee!

if we win they have to write in the line "whew, it smells something awful in here"

i guess this could also be a key in some order

F2D64AD97033074E
D2184EFB8CE04650
CBC30879D5F56DFF
C79A43F5E5E8E988

# ? Jul 25, 2019 03:10

Carbon dioxide: Oct 9, 2012

saphirecalypso posted:

I'm glad you paid to get unbanned. Thanks for your continuing contributions to SA.

# ? Jul 25, 2019 06:15

pseudorandom: Jun 16, 2010; Yam Slacker

So, if you read over the README image, it the first paragraph essentially hinted at all of the things we've found:

(Note: in case they start pulling shenanigans, this is a copy of the image I re-uploaded, not the original from the github. The original I copied is "https://i.imgur.com/jLNRhZq.png").

The first paragraph seems to be hinting at all of the challenges we've solved so far: "we see and hear" could be the youtube video, the "rabbitHole" thing we've covered, and "old books have mold" point toward the ISBNs. Looking forward, I decided to see what "ketab khune" was since it's unique and easily googleable. Short answer is, it translates (roughly?) to "book corner", which makes sense.

The following is PURE SPECULATION:

I didn't actually translate the phrase until later, so I actually just googled aimlessly first. One of the things I came up with was www.ketab.com/. The domain was registered in 1998 so it could be completely legit, but the website itself is a suspiciously large amount of links to nowhere as well as lipsum text.

Getting into the DEEP :tinfoil:

is looking at the address of the business:

quote:

Ketab Corporation
شرکت کتاب
12701 Van Nuys Blvd., Suite H
Pacoima, CA, 91331, USA

If you pull this address up in Google Maps, take a look at the username of who added the image:

This could be a HUGE coincidence, but it seems really weird. Interestingly, Black Hat 2019 starts August 3.

Basically I think we're all being recruited by ISIL or Barnes and Noble.

# ? Jul 25, 2019 06:25

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

"Six is where you meet the 1337" blackhat

# ? Jul 25, 2019 06:39

suffix: Jul 27, 2013; Wheeee!

suffix posted:

if we win they have to write in the line "whew, it smells something awful in here"

i guess this could also be a key in some order

F2D64AD97033074E
D2184EFB8CE04650
CBC30879D5F56DFF
C79A43F5E5E8E988

tried aes-256 with these or the readme key but no luck

# ? Jul 26, 2019 02:45