CONTENT OF ONION 2 (GROWING STRING)
OUTPUT OF PERL SCRIPT IS:
cu343l33nqaekrnw.onion
http://cu343l33nqaekrnw.onion/
http://cu343l33nqaekrnw.onion.to/
https://cu343l33nqaekrnw.tor2web.org/
<!--Patience is a virtue--> 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
HTML comment: Patience is a virtue
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
6342 92ba 49fe 336e dada 779a 3405 4a33 5c2e c12c 8bba ed4b 92dc c05e fe98 f76a bffd c238 9bdb 9de2 cf20 c009 acdc 1945 ab09 5a52 609a 5c21 9afd 5f3b 3edf 10fc b259 5066 6dfe 8d8c 433c d10c 0b4c 72ef dfe1 2c62 70d5 cfde 291f 9cf0 d73c b121 1140 136e 4057 380c 963d 70c7 6948 d9cf 6775 960c f98f bafa 435c 4401 5c59 5983 7a0f 8d9f 46e0 94f2 7c57 97b7 f8ab 49bf 28fa 674d 2ad2 f726 e197 8399 5692 1dab 2972 4cd4 8e1a 81fc 9bab 3565 f751 3e3e 368c d032 7b47 cf59 5afe bb78 d6b5 bca9 2ba0 21cd 6734 f436 2a0b 341f 3591 5717 3b53 d49e a5df f588 9d2c 9de6 b0d7 e8c6 1528 6ce5 96bf a83f 50b6 eeab d153 aaf5 0cd7 5f39 929b a11f b0f8 e8d6 1144 2846
Monochromatic Bitmap Interpretation
If you interpret these bits as pixels of monochromatic bitmap, when you asume that the "line" length is 25 you get this: http://postimg.org/image/yukab2cjx/ which looks like some sort of face
BUT! GET THIS!http://postimg.org/image/4hgmiqo7h/
I am positive that I see text and very sharp number 3. I am not the only one that can see the symmetry, right?
http://postimg.org/image/db7h08q0j/2fd3ffe1/
String Length
String is 512 characters at last edit and counting. String seems to be growing incrementally.
- [08:48] String is 280 characters.
- [09:13] it's 284 now.
- [10:10] 296 char
- [10:34] 300 char
- [11:34] 306 char
- [11:52] 310 char
- [11:56] 312 char
- [20:00:01] 406 char
- [03:25 GMT] 500 char
- [04:10 GMT] 512 char (time is estimated, more accurate one to come)
Since I've been watching, onion2 has updated at the following times:
(how do you make this into a table?)
clock time: 00 20 25 35 50 05 15 20 45 00 15 20 40 45 05 10 15 30 40 15
interval: xx 20 05 10 15 15 10 05 25 15 15 05 20 05 20 05 05 15 10 35
int/5: xx 04 01 02 03 03 02 01 05 03 03 01 04 01 04 01 01 03 02 07 [edit by Joja]
- data: 26 e1 97 83 99 56 92 1d ab 29 72 4c d4 8e 1a 81 fc 9b ab 35
The digits are posted in what appears to be a sorta pattern that looks like this:
But this "pattern" could simply be an artifact of how clocks work.
Diagram with intervals and appearance of every time delta: http://imgur.com/lTRRxTT
TIMESTAMPS FROM ONION 2 UPDATES BY BotSottile
Previous intervals have been reported to be: 10, 30, 10, 15, 5, 5, 10, 15, 5, 5 though I cannot confirm this
put it in reference (98% sure its correct)
00 20 25 35 50 05 15 20 45 00 15 20 40 45 05 10 clock
10 30 10 15 05 05 10 15 05 05 20 05 10 15 15 10 05 25 15 15 05 20 05 20 05 time delay
49 bf 28 fa 67 4d 2a d2 f7 26 e1 97 83 99 56 92 1d ab 29 72 4c d4 8e 1a 81 value
I've created an updated version of the above information to include some more data. I removed the values that had no minute attached for ease of reading, and so this is a straightforward table. It doesn't contain all the information on the onion site due to my absence from my computer for the last hour or so, but at least it looks neat. It also highlights that the minute value and the intervals between updates are all multiples of five. http://pastebin.com/5bTLHqCN
GRAPH: Here's a graph of all the byte values http://i.imgur.com/JBfupDk.png No real coherency
THOUGHT: The HTML at https://cu343l33nqaekrnw.onion.to/ is the same reference from 2013:
< --Patience is a virtue-- >
This string will only appear over time. But that doesn't mean that time is the solution. It only means time will reveal the clue, so don't jump too far in just yet.
As of 1410CST, the string is 404 characters, while at 1415CST, it is 406 characters. We get 2 characters at a time and they appears to be HEX. Start with that. The distributions can be seen here... (updated 2110CDT) http://oi43.tinypic.com/2uomf89.jpg.
With this reveal rate, it has only been running for 17 hours as of 1440CST/7 Jan 14.
With regards to the phrase "patience is a virtue", could this be a reference to the medieval, 1000 line poem called Psychomachia? It's regarded as the origin of the proverb, and so may hold some relevance. It's just a thought, but it's good to get it down for the record.
SPECULATIONS:
The timing is unlikely an coincidence. Setting up a system like that is more work than just having it deliver every 5 minutes.
This get´s more likely considering the fact that after the change the Onions HTTP-Header included a keep-alive: 5 max 100. [1]
So possibilities include:
- The time/delay values have a meaning. They could be paired with the stringbytes from that time e.g. (20,e1). Eventually divided by 5, so (4,e1). That would mean it´s possible to "apply" them to each other, in some way. ROT x, BASE x, multiply by x, add x, substract x, MOD x, take x*y (e1e1e1e1) ... But it might as well be shifted by 1, we don´t know if "5"=1 or "5"=0. There have been some hints that substracting 1 might be necessary in one of the tasks.
- The actual values aren´t important (contradicts [1]). It´s more about the fact, that there´s a rhythm. The string might be a poem of some sort. (unlikely)
- completely or partially different explanation
THE FILE IS COMPLETE
The file that was posting for the last 23 hours finished and contained the following information (512 characters):
< ---Patience is a virtue --- >
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
It was almost immediately replaced with code that was modified at 05:31:40 GMT, after nearly an hour of inactivity. The source code has now changed to 761.
The string is 3641299 characters long. It contains significant amounts of repeated text, illustrated below. This is not true of the whole thing, but shows quite how much there is.
0027001fffefb5b9b6b9fffefefffffefffeffff0024ffbcfffefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefe024ffbcfefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefe003
761 is a prime, and was used last year as the title of the mp3 "The Instar Emergence". Note that it's reverse, 167, is also prime.
- 761 and 167 we re cookies on test page in 2013 also
This is what we were waiting for.
link to ONION 2 source https://infotomb.com/oyfhl (or download: https://infotomb.com/oyfhl.txt)
The Onion then suddenly changed to a longer string. We do not know where the old string we have been monitoring went.
printscreen of onion 2 with second string
Link to ONION 2 ver 2 HTML source: https://infotomb.com/oyfhl
- download: https://infotomb.com/oyfhl.txt
- 3.5 megabyte onion dump
- LENGHT OF FULL HTML 378FDE = 3641310 bytes
- LENGHT OF STRING 378FD2 = 3641298 bytes
<!--761--> 0027001fffefb5b9b6b9fffefefffffefffeffff0024ffbcfffefefefefefefefefefefefefe fefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefe fefefefefefefefefefefefefe0024ffbcfefefefefefefefefefefefefefefefefefefefefe fefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefe ... .. . .. ... fefefefefefefefefefefebcff2400fefefefefefefefefefefefefefefefefefefefefefefe fefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefe fefefeffbcff2400fffffefffefffffefeffb9b6b9b5efff1f002700
THIS IS HOW PPL DID MAGIC AND FOUND 3 JPG IMAGES IN SECONF STRING ON ONION 2
Long string had 3 jpgs in it.
To get them out you flip all the bits (1=0 and 0=1) or XOR whole string with 0oxff (11111111)
First two jpgs were in string sequentially from begining forward one after another. Last one was from end of file towards beginning, and reversed.
Offset from beginning of each jpg file in our string:
- 00000000: Liber Primus
- 000293AC: Rune Warning Message
- 00191BB2: Chapter 1 Intus [reversed]
Example:
- our string start with 0x00 0x27; and ends with 0x27 0x00
- A quick look at Wikipedia's JPEG article tells us how every jpg file begins:
- bytes 0xFF, 0xD8 indicate start of image
- bytes 0xFF, 0xD9 indicate end of image
- our string begins with 0x00 in binary (00000000), 0x27 in binary (00100111)
- we can reverse all bits or XOR every byte with 0xff (11111111)
0x00 0x27 00000000 00100111 XOR 11111111 11111111 = 11111111 11011000 0xFF 0xD8
- 0xFF 0xD8 are first two bytes of jpg
UNIX COMMANDS TO MAKE FILES:
dd if=onionout.jpg bs=1 skip=$((0x00293ac)) > cu343l33nqaekrnw.onion.6.jpg
Commands for splitting the onionout.jpg into three files (offsets converted to decimal). Here the onion file is called onioninvert.bin after inversion (xor with 0xff):
dd if=onioninvert.bin of=onion1.jpg bs=1 skip=0 count=168876 dd if=onioninvert.bin of=onion2.jpg bs=1 skip=168876 count=1476614 dd if=onioninvert.bin of=onion3rev.jpg bs=1 skip=1645490 count=175159
Note that the 3:d file is reversed. Write a program to print out all the bytes in the reverse order to create the third jpg.
FIRST JPG Liber Primus
jpg from string
JPG LINK:
http://imagebin.org/index.php?mode=image&id=285655
WHICH BOOK?
MOST LIKELY?
Journey Into Jung's Red Book: Liber Primus
by Jules Okapi, J.C. Andrijeski (Goodreads Author)
http://www.goodreads.com/book/show/9734908-journey-into-jung-s-red-book
- "• other philosophy they use is "what you resist persists" by Jung "
- from WARNING PASTEBIN http://pastebin.com/dHJ6JNkr
COULD BE ALSO:
Liber primus, or, A first book of Latin exercises: or, A first book of Latin exercises
Author: Joseph Dana
Publisher: J. H. A. Frost
Year: 1827
Language: Latin
LINK TO BOOK:https://archive.org/details/liberprimusoraf02danagoog OR THIS:
OUTGUESS:
https://infotomb.com/w31vx.txt
HEX MESSAGE FROM OUTGUESSED JPG 1
775d0481115f6e4f3ba8873ac66da1df6bbe3ff19389878f2ddb9423881b 5a95bb5dff35ebab119090c5c19678e58bf9cfe2a93694e23da86465cd11 64d7de4744d7a4fea07f75c7db7676f8fc9b52621881b02f2296fe5922b2 6759ee322200e7d8c8a92c0e1ea401cb384a466f3f237ee220b95d151210 c03cd464ba34077eab3529503d6395f84fedbc0245b2f8425ac4b774bf91 16f5dcc1b3af3fa15ee85bc63dcb40b6eec5c2c05d34295f25eb7b788abc f5674f5a6344a2768e768407a06a48fb9c7d4b6c75b243043d562d0db556 3650e412fc04b538c3900dea56da01591a00f87b6f42831e3a9730ec76a2 e3c7262cf7a6ba39c70b50c35a9b9226b1404bd4b00e79b508a4a3410eaf 057bb314a41c9e381820cea07b323f038749548c042f6203a30a5fa12f18 08109faf49c18a2d55eca3610b8206b143d487cd195c58080fe84e26f6f7 57b6a7cbdaeab019be4482644a02effce5e7e0920b3173412c7245ad832e ea3e00e49c7a88d52f136aed5b4b1973541de38b8093901522e26491c2ea ede8464e3e77a2cc1bb78c2274aaff68120a4751337c1f92892dc80dc51a ad3df760f5a022e835e902aa389df29a8be04f067f0735622125e7fd0eda de4fcf6ff48ad4954e8ab6b130e4d5fb2540c178c7fcc243cc7701aa3cf8 21546dfe0558854b202745a87c98d2ea3236d850c25bf0cb93d4c0bc78ec c0841a9b341b9a2c8449c5825600139d3b9710822e4f5dcd8f8ae6395868 265221a7eade3f93441b33bbd45145fd08a8816247f55b6e1a2fdc2d9b44 451c828194abbe59730fe07894a5536138ce1cd21b0306211c4c9ddd8be6 3c69f6470bcb878f544825a789aaf9adff2b2e4408469de7f6c2fc6d1823 8d5efa614aec168f4f33f49c2eac1ed9a6606b39c6213b5a5c0ca5fb6cf2 0e0f19e8a7faffe11edad29472acf65d6535b0832c5b589623a3b5a3c337 f7b0aae38ec1cd7815f334447d2e9d0ccd75d06e9d533f7623bfe22611d5 661c65d7c4bad3074ba437b9d9006eb638eb2d744716b0fda8a6f2a09b8c f7b7a9bae4a7b96054bdeb220e99c32eb2fdead676becde5938ee32abb4c 126e8420e6259029d1bcd9a51486fb0e619a7654c67954787c696df49b57 ef42b503da982fd5b02acb142ce2d1fe64db441c895240c6a07c1f5baabd ace7525482dd263f348c6e0ae5a0693346ed966f726e2d7261e7e50f1e48 0c0b14d1e1acf72d29e678b322ebaa3828b5b1d2ca17671e8687a15ddf89 c1a8f5a35b2e4d9e958452676ad69a66e2944b5843768d1deb6b9bdb12fe 38d34769da0bbd00ac22724b8df8dd412ef0c114762f4f1f5b00c796ebf8 733c11d9f435ae76a72dc66c162f1f4b25fc3473b157c1b044d72ecfa059 fe
- 1982 char = 991 bytes
PGP:
SECOND JPG Chapter I Intus
second jpg from onion
intus (not comparable)
OUTGUESSED MESAGE:
https://infotomb.com/vd0bo.txt
HEX MESSAGE FROM OUTGUESSED JPG 2
17a1e10393d3c62b0e2c2d59ca197f85246746c533bf6d8316f2256679e8 f3fdf08d1a2a30470f0bccba289066e74a44703ebf32d0c85072b96d75ab 0d52aeb0fa971d00161a78adfcf82fe97e68004551973b11ebf9d09f377d 41328e401cb3287240c6d6c7f479f1521b73e958d15305c6e12f2b0fe59f 37581648ab3ce7ff718573295f249dff41476700feba4c9ed321cc593e68 5015c175301674d1ad5f02ca8be69a786c4941fd41d7e177d710fff64041 4e8926bff638e4e9f056de4d31d56e7aeb21b1c64f5b963f328bc3e9fca1 9daf235deff53c368d24e32213ea621747d64c77dae0452f9235c9ad4eab e001066c03e47f663bdb56a55f6ba3c358e5b63a66b64dbd5dae1a7fa9e0 bf0c1c520e08dd1f57b79510b48fc55717cf2f45c5c1f2cad771d06e00f3 cf46e6cc99cd80f30ca39ec403485ac4e34a2e9905d2f3b29a754f2354a6 49e0564ee196b5934010c116e4195da9fb2a62cf493d1ea1e913cf6c01bc 7e14939380edffb4e890d571a2618aaa56567da3bda4ef5c70d87d6f848a c4cb27f9e27d873f2e19711be4b4d3687d2da067a5270c30cfa7bc77ef39 6ce0228d259e76e187c1acc9299dc4656dbf7d427d5489fb09f00768b287 69c33a87b9949f657277bdfc83299a044d983cb700f57f099d8e93a97ff3 230161f6e58e1c48885992a76a18b0d6b53f7c36848fc4ae73ce86459d9a 0133503262335d3671f0b5065b63c7ed7940b06df492c1a48527026dde55 cb83e8851b795ba6a021a571ab1f8e8a221756a438460fa8dc3cf189d78d bce1af1f4d4adf4d66a892bece6f3ba50bf0aed30f96287b08839442f11e 01e8dc401d040941d7d862cba80edb651f83b31059e6c17613a9d2ff24a7 e88f7d534a612334e50798ee2c81329eccb9fdc36db00e25180b64664bb5 522e10471e4ce5e400855932a07dcde4c45ed07d879a1b298afb53a9c8be 6017e101ae19f79693a9d89b0cc91902164a262b2386f4677ffc9f3b28b7 0fe2469121c9e87e07b3385d8f88edd77c012ad378fac5b465950e3d2969 4777e6e7748d0ff19d38757198625816759c5f4b040667a26238c0315423 4af3bff4d40b5674bbc2848ad8b3b5f58dc191a68cf1dc435c7a0da7ac21 7cb5ee52de5527e9c7adba5f8f4104934bcf4821b4c639322ef45ec817b0 ceec2abfab5b41f04cc0193401da8e8a244e8d940d2283ba0b713629548a 2a272bcf09d53023e3c21a8ef95fb1e5bfa4a7d9c4d51d0af3efbcc25124 b7f8500a93818b3f6b621d1f410854f02bd87a648a4955fcebb67bfcdcbc 7bbe410dae6a45e79fffc51f1f1f4c8786682db0609d42045d203650340b 67923e6a9a2120930182828f9a82ffc7c5e4831be89d87d7ccfd021bfb13 57
- 1982 char = 991 bytes
THIRD JPG Runes Warning
IMAGE BAKCUP:
3rd image ppl say came from onion 2
OUTGUESED MESSAGE:
1982 char = 991 bytes
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
PGP:
- valid they said http://imgur.com/r7s3E9S
Gematria primus from 2013!
Transcription of Runes
Runes substitution key
TEXT:
R NGRAMW JIHEIIAI MAEYW EAAAEN
YEP JAEAED IXDISEO NGLREO THAEIA
DMAENG EOAE JI EOAIAI EOIPEO YI D
MAENGHICOEI EAEMC THAEIAA EOAIAY IX
SIAEIMDI THAEIAA CFY CAE MAEEO ICEEO AE
A DLRWI YEP JAEAED AEA YI NICCROEI
DAEMEOREMIC NGEYEM IEYIA YI NGAE
ACC AEA YIEA MIANJIAC EAAEA RHH E
C CRDAIC
NUMERICAL:
11 7911977119 373123673110731 7110110319 1099710129
1036743 3710110189 314789315341 79731141 5101107
897110179 41101 3731 419710731 41314341 10331 89
71101792331138331 109677113 510110797 510110797 4197107103 3147
533197317131 510110797 132103 13101 7110141 31136741 101
97 8973111931 1036743 3710110189 10197 10331 294343118331
8910171411167713113 79671036771 31671033197 10331 79101
971343 10197 103316797 711072937319743 10910197 112323 67
43 431189973113
Soulseekah coded an analog of the 'Count' function available at
R NGRAMW JIHEIIAI MAEYW EAAAEN YEP JAEAED IXDISEO NGLREO THAEIA DMAENG EOAE JI EOAIAI EOIPEO YI D MAENGHICOEI EAEMC THAEIAA EOAIAY IX SIAEIMDI THAEIAA CFY CAE MAEEO ICEEO AE A DLRWI YEP JAEAED AEA YI NICCROEI DAEMEOREMIC NGEYEM IEYIA YI NGAE ACC AEA YIEA MIANJIAC EAAEA RHH E C CRDAIC
Runes Solved
1. Stack the Gematria Primus, left column onto the right one. 2. Find rune position in the list (for example, first rune R is position 5) 3. Count the same position backwards (5 from bottom gets you A)
(R) (ING RAM W) (JIHEI IA I) (M AE YW) (EA A AE N) A WARNING. BELIEVE NOTHING FROM (YEP) (J AE AE D ) ... THIS BOOK. ...
And so on. The message is:
A Warning Believe nothing from this book, Except what you know to be true. Test the knowledge, find your truth, experience your death. Do not edit or change this book, Or the message contained within. Either the words or their numbers For all is sacred!
Using the Gematria Primus , each line adds up to a prime number, most of which are palindromic primes (marked with a *).
A Warning Believe nothing from this book, = 757* Except what you know to be true. = 1009* Test the knowledge, = 691 find your truth, = 353* experience your death. = 769* Do not edit or change this book, = 911* Or the message contained within. = 1051* Either the words or their numbers = 859 For all is sacred! = 677
SOLUTION
A warning: believe nothing from this book.
Except what you know to be true.
Test the knowledge, find your truth,
experience your death.
Do not edit or change this book.
Or the message contained within.
Either the words or their numbers For all is sacred!
"• teach followers to "Find a death every day." from Warning pastein: http://pastebin.com/dHJ6JNkr
Next Step
https://gist.github.com/numinit/4cd82eba206a8af9561c
outguess jpg1 XOR outguess jpg2 XOR outguessjpg3 = IDGTK UMLOO ARWOE RTHIS UTETL HUTIA TSLLO UIMNI TELNJ 7TFYV OIUAU SNOCO 5JI4M EODZZ Good luck. 3301
Magic for this Step
- just outguess jpg1 xor ougutess2 xor outguress3
- so, 1. we got 3.5 megabyte onion dump
- converted to raw data
- xord with fffffffffff.....
- got 3 images
- 1 at offset 0, 2 at offset 0x00293ac and then reveversed, and 3 at offset 0 again
- each image had similar outguesses with 3 same-sized hexdumps
- 991 bytes long, xor the 3 together to get https://infotomb.com/z5f6p.txt
- simple as that
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IDGTK UMLOO ARWOE RTHIS UTETL HUTIA TSLLO UIMNI TELNJ 7TFYV OIUAU SNOCO 5JI4M EODZZ Good luck. 3301 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBAgAGBQJSy23PAAoJEBgfAeV6NQkPeJwP/0IoafJ1SbmhD+KNbL5I2EdH jgPRnZNrKCyMpWFSIw1qs6ujuw6VnW/rfnOD+df4kpzoAwEFfZDcRnBVsvIzOJ31 Txj9jXD22ki/CNRY88NyIzW9fjKs+iOylsa7Tx+6PBb3ndoYNEwnQwLIq3K4S3kQ tgMzE3LiVq2pQwqFNdN+zGqcq7POEs0GmnL1aNpqU+Wrba4gSfoWwQBWUDv3S/s8 vY0hEqhWNd76wphig6hH6OyIaX/t1eYfcsSYhzAE5oKKahGr1E7cX1GBpHCIr1WM ZwNaGVArQAkyEzT++tmF01O9h218CiTUFoBM/Zxyra7vxI2UOYS/pLonuV+eXARY YfPHaZZxfk3bUWXcxioRukFSY2+xNdPfuBIT8rcJqa1kPJOzeZVC/IcwHA2mmG4l 3ltiVcDnQrZgz6Im3/ugFg8bqW12qqZ6XizRP3EXm4EnyhpfKZnXKPLEOvPKCj6j 1kYCrLmGtTTPFx79fZfryGXQIEAmipRbjVS5sVbUCfgmqUagmdU6v9VI53n6+r0J b2amxREA+2MflkEoVJUaLQJ1rKZLFFJ9J17zUaXKMllsDBWXJS4Mb54o2+8bkEcM 3cP+16XV9pf2wZBkJE0AwoXI4L8JEyjNZZcGSLy8BojlAupX3Fg9KKt71XXrm9FD tuBhMYWo/TDz+4UzLB+I =57tj -----END PGP SIGNATURE-----
Columnar tranposition with keys of length 2 to 9:
- http://codeseekah.com/cicada/book.transpositions.double.gz (14MB)
- http://codeseekah.com/cicada/book.transpositions.gz (9MB)
- http://codeseekah.com/cicada/book.transpositions.doublemirror.gz (14MB)
- http://codeseekah.com/cicada/book.transpositions.triplestackmirror.gz (14MB)
Progress of PUZZLE is above this title
LINKS AND THINGS RELATED TO XORING
Progress of PUZZLE is above this title
XOR? OR NOT XOR?
Since string on Onion no 2 is growing; we expect it is like it was reddit in 2012 and twitter in 2013.
Most agree that XOR Would be good guess
- shout out to our boys at OTP22 for creating this tool (crashdemons):
Documented effort:
- http://codeseekah.com/cicada/zN4h51m.file.txt [300kb] (approx. 20 bytes, fed through file(1), nothing interesting it seems)
- http://codeseekah.com/cicada/3301.file.txt - 2mb of file(1) output scavange away, nothing interesting it seems, please check closer
LIST OF THINGS THAT HAD BEEN XORDED AND RESULTED STRINGS
(please keep that link in order to keep on track with the recent process)
FLASHBACK FROM THE PAST
- look at this: http://prntscr.com/2hdya7
- search this article for "padding"
- last year
twitter feed was also automatic and constantly posting
we did clever XORring (ymgve did)
and we predicted last tweets
http://uncovering-cicada.wikia.com/wiki/Tweeter,_XORing,_Gematria_Primus_and_two_TOR_adresses search this articles for "padding"
Output was much larger than BASE64 needed for png, so it was padded with filler. Part of file after base64 contain only repeating string: 3301033010330103301033010...
MAYBE WE HAVE SIMILAR PADDING NOW - http://static2.wikia.nocookie.net/__cb20130112052317/uncovering-cicada/images/9/98/DIAGupdated.jpg
here is diagram of last year
swhowing what was xored
http://prntscr.com/2heqsw !!! to get base64 encoded png, we XORED three things!
tweets XOR mp3 XOR 560.13 = BASE64 encoded png
May the enlightening field upon all of you.
-3301
Progress of PUZZLE is above this title