unforum :: Topic review

bambusar · Posted: Wed Dec 12, 2012 4:48 am

[09:34] echimp SSTV the image refers to a rail under the trailer where disk was found

CD was cleaned and is readable

[09:45] echimp_ looks like the disk contains an unbunto distro

[09:50] echimp_ contents of disk: http://imgur.com/nvfZJ

edit: links to CD

[http://pastebin.ca/2291896 <--- not very helpful
so very random
each bit has the same occurence
hahaha
http://bestmimosa.com/echimp/Track%2001.7z <---link to CD ISO
https://dl.dropbox.com/u/1593421/otp22/weirdblock.bin <---that's the 100mb isolated

https://dl.dropbox.com/u/28940500/weirdblock.bin
http://valkyrie.rustedlogic.net/otp.bin

bambusar · Posted: Wed Dec 12, 2012 4:29 am

simultanously another thing is going on

after the SSTV a voice says 18001

calling agent number 18001:

http://dialer.otp22.com/2012-12-12%2006-59%20UTC%20-%20303-309-0004%20-%2018001.wav

a voice says

"131212"

calling agent number 131212:

http://dialer.otp22.com/2012-12-12%2007-07%20UTC%20-%20202-999-3335%20-%20131212.wav

"entry incorrect"

we need to call MD guy with 131212!!!!

[09:37] coastlines got it
[09:37] coastlines 13/391297/3524531
[09:37] coastlines http://vocaroo.com/i/s1PbGhWc85hQ
[09:38] XkeeperLaptop_ coastlines: what number was that from, 131212?
[09:38] coastlines yup

bambusar · Posted: Wed Dec 12, 2012 4:20 am

WE FOUND THE DROP

Thx to the whole crew of OTPers: porchemonkey, borg484, echimp and anon

http://i.imgur.com/PQttM.jpg

A HOLE MAKES SENSE NOW (there is no hole in the CD, that is flash light artifact)

bambusar · Posted: Wed Dec 12, 2012 4:18 am

We are overwhelmed in all loose ends we are dealing with atm.

New Mexico Drop (we have 4th person there ATM, in less thna 48 hours since we got coordinates) (FBINSAMOSSADMI6 beat that)

Message desk guy is ON / http://vocaroo.com/i/s0ZkODBlCaXP http://vocaroo.com/i/s1XK6WaPQxrK http://vocaroo.com/i/s0pZdhmBJ3nd)

WE have 3333# numbers and stellite connection

Battery level changed to "generator connectied to charger" and is now gone

And 16041 changed to SSTV

it looks so similar to images that coastlines took, she was inches away from drop CD while taking this picture Rolling Eyes

:

Code:

[10:00] coastlines was a mere inches away from drop, ultimate fail
[10:00] coastlines liked being handled by Adah....
[10:00] coastlines haaaaaaaaay oooo
[10:00] coastlines time for bed, i'm delirious

But we all know it is about the journey not the goal.

http://i.imgur.com/OFrft.jpg

bambusar · Posted: Wed Dec 12, 2012 1:19 am

About black box from LV

[02:09] car7erd1ckson https://dl.dropbox.com/u/28940500/vegas%20box.zip here are all the codes that came from the box
[02:12] car7erd1ckson what i don't know is if they were decoded
[02:13] zhazha ok, thanks

bambusar · Posted: Wed Dec 12, 2012 1:01 am

more pictures:

this is what the trailer looks like: http://i.imgur.com/KuyUe.jpg
and underneath: http://i.imgur.com/OFrft.jpg
http://i.imgur.com/KCHDa.jpg
----
http://i.imgur.com/1hQ9d.jpg
http://imgur.com/JhGY5

Another drop retrieval attempt report from dedicated redditor.

Thank you all for trying. We didnt find it yet. We were able to do visit the site few times and response time was incredible.

But sadly we didnt find it... We will keep trying.

bambusar · Posted: Tue Dec 11, 2012 2:36 pm

We did our firs attempt but it wasn't successful

http://imgur.com/QxDl2
http://imgur.com/1hQ9d

Code:

[2012-12-11 14:37:44] <Adah> hey guys!
[2012-12-11 14:37:52] <Adah> djx is at the drop location right now
[2012-12-11 14:38:01] <Adah> But he can't find anything as of yet.
[2012-12-11 14:38:23] <Adah> https://maps.google.com/maps?q=31.851223,+-106.148857&hl=en&sll=31.851532,-106.1491&sspn=0.000834,0.001888&t=h&z=16 not real coords!!!
[2012-12-11 14:41:19] <Adah> Anyone here?
[2012-12-11 14:45:28] <Hynix> I am.
[2012-12-11 14:45:36] <Adah> Awesome
[2012-12-11 14:45:50] <Adah> Is there any suggestions you can think of?
[2012-12-11 14:46:21] <Adah> I told him to look underneath already, but apparently there isn't an obvious hole anywhere haha
[2012-12-11 14:46:41] <Hynix> just a sec, I'm on dial-up
[2012-12-11 14:47:35] <Hynix> <3 bing maps loads where google does not
[2012-12-11 14:48:11] <Adah> hehe
[2012-12-11 14:49:09] <Hynix> no footprints anywhere?
[2012-12-11 14:49:25] <Adah> They were looking, but last I heard they couldn't find any
[2012-12-11 14:49:33] <Adah> I haven't gotten a reply to my last text yet.
[2012-12-11 14:49:57] <Hynix> Nothing it couldbe on top of either?
[2012-12-11 14:50:07] <Adah> the clue was BL/HOLE
[2012-12-11 14:50:10] <Adah> we don't know what BL means
[2012-12-11 14:50:28] <Hynix> Blue?
[2012-12-11 14:50:42] <Hynix> BLack?
[2012-12-11 14:51:35] <Adah> the thing above the trailers looks blueish I guess
[2012-12-11 14:51:43] <Adah> I'm forgetting the word for it because I got 3 hours of sleep
[2012-12-11 14:51:44] <Hynix> well Bing was loading, now it's refreshed itself and taking it's sweet time.
[2012-12-11 14:51:44] <Adah> uh
[2012-12-11 14:51:49] <Adah> hahaha
[2012-12-11 14:55:09] <Adah> He says they looked for about an hour but couldn't find anything
[2012-12-11 14:55:16] <Adah> And he has to go to work now so they can't stay.
[2012-12-11 14:55:23] <Hynix> Maybe it's too soon?
[2012-12-11 14:55:25] <Adah> He has pictures and he'll upload them when he gets there.

bambusar · Posted: Tue Dec 11, 2012 2:06 am

bambusar · Posted: Mon Dec 10, 2012 10:42 pm

!!!!!!New SONG NEW DROP!!!!!!!

Decoded by Ymgve:

Z 100130Z DEC 12SECRET//PRJMLPL//75X5[CR][LF]OJHID/DRPUPDT//[CR][LF]SUBJ/AGENT 16041//[CR][LF]DRMP/31.852605/-106.147186/BL/HOLE//GENTEXT/DISC//[CR][LF]GENTEXEQREMARKS/1. PICKUP DROP BEFORE 130000Z DEC 12/

Next drop near Texas/New Mexico

El Paso or Ciudad Juarez

20 miles out of the city
Hank Hill, propane, cartoons
the clue was HOLE, right?

http://dialer.otp22.com/2012-12-10%2016-22%20UTC%20-%20202-999-3335%20-%2016041.wav

coords start 27.2 seconds into 2012-12-10 16-22 UTC - 202-999-3335 - 16041.wav

i think this is the song: Mason vs. Princess Superstar - Perfect (Exceeder)

the drop is around the area of 31.8 -106.1
coordinates are slightly changed for safety of our drop, visit our IRC if you are prepared to go pick it up to get exact spot
http://webchat.freenode.net/?channels=#arg

Maps:
BING
http://binged.it/TQxy1E
GOOGLE
http://goo.gl/maps/KpSbE

Spoiler (Rollover to View):

!!!!! WE ARE LOOKING FOR PEOPLE FROM Texas El Paso/Juarez TO PICKUP THE DROP !!!!!!

bambusar · Posted: Mon Dec 10, 2012 4:04 am

"gurgling" noise at 6-10 seconds in 202 204 2303 had been solved

https://dl.dropbox.com/u/1593421/otp22/messagedesktwf.wav

More info: http://otp22.referata.com/wiki/202_204_2303/Investigation

[2012-12-09 22:49:25] <LordHeinrich> I looked at that as a spectrogram and didn't find anything interesting, sadly
[2012-12-09 22:49:29] <LordHeinrich> I think it's just an error tone
[2012-12-09 22:49:41] <Ymgve> LordHeinrich: no, the digital signal, the one we're trying to decode now
[2012-12-09 22:50:21] <Ymgve> the "gurgling" noise at 6-10 seconds
[2012-12-09 22:50:45] |<-- Mortvert has left freenode ()
[2012-12-09 22:51:52] <R6mco> Ymgve: fooling around with MFSK-4 without a clue, you can better buy a lot in the state lottery ; -)
[2012-12-09 22:53:20] <Ymgve> considering the other message in the same place only said "MESSAGE DESK GA" this will probably turn out to be something equally boring
[2012-12-09 22:54:21] <R6mco> I wonder why this was 'normal' rtty
[2012-12-09 22:54:41] <Ymgve> PM works in mysterious ways
[2012-12-09 22:57:24] <R6mco> Ymgve: yeah, but there are limits ... if it is a bit phreaking game... ok ... like 'crack the code'
[2012-12-09 22:57:35] <R6mco> but this is information diarrhea
[2012-12-09 23:01:21] <Ymgve> R6mco: http://de.wikipedia.org/wiki/Cellular_Text_Telephone_Modem
[2012-12-09 23:01:26] <Ymgve> see something you recognize?
[2012-12-09 23:03:21] <R6mco> 400 Hz / 600 Hz / 800 Hz / 1000 Hz
[2012-12-09 23:04:26] <Ymgve> bingo

[2012-12-10 01:06:13] <Ymgve> '\x05ME\x16S\x16\x16\x16\x16\x16' '\x05SAGE\x16\x16\x16\x16\x16'
[2012-12-10 01:06:21] <Ymgve> and I don't care enough to transcribe the last part
[2012-12-10 01:06:48] <Adah> What's this from?
[2012-12-10 01:06:58] <Ymgve> \x16 are idle chars, \x05 is start of block
[2012-12-10 01:07:07] <Ymgve> http://vocaroo.com/i/s1pIH6tqiewI
[2012-12-10 01:08:15] <Ymgve> it's a recording of someone typing MESSAGE and I bet the last part I haven't decoded will contain DESK

[2012-12-10 01:08:28] <Ymgve> the encoding is the one used in http://de.wikipedia.org/wiki/Cellular_Text_Telephone_Modem
[2012-12-10 01:09:06] <Ymgve> code used for decoding: http://pastebin.com/uR5mPgpL
[2012-12-10 01:16:27] <Lurker69> how did you find that encoding ymgve?
[2012-12-10 01:16:47] <Ymgve> Lurker69: googled a lot for the frequencies used
[2012-12-10 01:16:53] <Ymgve> 400, 600, 800, 1000hz

[2012-12-10 01:18:15] <nadando> why are all those extra characters in there?
[2012-12-10 01:18:35] <Ymgve> they are idles
[2012-12-10 01:18:41] <Ymgve> this is like a teletype thing
[2012-12-10 01:18:47] <Ymgve> sends a letter when someone presses a key
[2012-12-10 01:18:55] <Ymgve> sends an idle char if nothing has been pressed

bambusar · Posted: Sun Dec 09, 2012 10:43 am

looks like we are back at satellites

WE STILL NEED TO GET THAT IRIDIUM SIM CARD CHECKED AND ACTIVATED
WE NEED SOMEBODY TO WITH SAT PHONE!

bambusar · Posted: Sun Dec 09, 2012 10:03 am

NEw recording of
202 204 2303
https://dl.dropbox.com/u/1593421/otp22/messagedesktwf.wav

IT DECODED AS:

"MESSAGE DESK GA"

[14:57] Lurker69 i have seen that "MESSAGE DESK GA" before somwhere...
[14:57] Ymgve uhhhhhh http://www.zarya.info/Frequencies/FrequenciesDoD.php
[14:57] Ymgve "US intelligence-related satellite near 144� west longitude, possibly including communications: One of a triplet of reported frequencies carrying similar signals from satellite in geosynchronous orbit, exact frequency not known - also reported to transmit at 256.475, 263.225, 267.550 MHz and 2242.5 MHz"
[14:59] Ymgve so the 33332 message refers to a military satellite
[14:59] Ymgve if that satellite suddenly starts sending OTP related data, I'm outta here

http://nssdc.gsfc.nasa.gov/nmc/masterCatalog.do?sc=2001-046A

bambusar · Posted: Sun Dec 09, 2012 9:39 am

9/12/2012

we found new binary song on 202-999-3335 and 303-309-0004 AGENT NUMBER 899053 HERE IS THE DECRYPTED MESSAGE:

Spoiler (Rollover to View):

R/NOTES/MX/33330/STATUS/33331/FIRMWARELOAD/33332/CHANNEL/33333/VERSION/33334/REBOOT/33335/HALT

MX? http://www.ibratro.com/MX-ONE-Converged-PBX.html

New binary on agent code 899053 (which was provided during one of the return calls from MD).

Recording: http://referata.otp22.com/2012-12-09%2006-36%20UTC%20-%20303-309-0004%20-%20899053.wav

Partial decoding(R6mco had to leave and wasn't able to finish transcribing):
<R6mco> YR/NOTES/MX/33330/STATUS/33331/FIRMWARELOAD/33332/CHA

Results of calling the numbers in the 33330-33336 range:

33330: "Battery low: 11.7 Volts. Power: good. Rectifier: good. (Store? Door?): good. Temperature: good. Ambient Temperature: good. Message Port: good. Network: good. Doftware: good. Password: off."
http://autodialler.otp22.com/2012-12-09%2011-50%20UTC%20-%20202-999-3335%20-%2033330.wav

33331: "This operation is not supported", dude's voice
http://autodialler.otp22.com/2012-12-09%2011-51%20UTC%20-%20202-999-3335%20-%2033331.wav

33332: "Satellite channel provision to 250.075"
http://autodialler.otp22.com/2012-12-09%2011-59%20UTC%20-%20202-999-3335%20-%2033332.wav

33333: "Version 3.1"
http://autodialler.otp22.com/2012-12-09%2012-03%20UTC%20-%20202-999-3335%20-%2033333.wav

33334: tones that zhazha does not understand
http://referata.otp22.com/2012-12-09%2012-05%20UTC%20-%20202-999-3335%20-%2033334.wav

33335: Same as 33334
http://referata.otp22.com/2012-12-09%2012-11%20UTC%20-%20202-999-3335%20-%2033335.wav

33336: "This feature code was not provisioned properly. Please check programming and try again."
http://referata.otp22.com/2012-12-09%2012-12%20UTC%20-%20202-999-3335%20-%2033336.wav

33337-33340 were also tried, as well as 34567, and all received the standard agent system's "entry incorrect"

bambusar · Posted: Sun Dec 09, 2012 7:49 am

[12:48] G LOW BATTERY 11,4 Volts !!!!!
[12:48] G its used to say 11.7 volts
[12:48] G few days back

bambusar · Posted: Sun Dec 09, 2012 7:32 am

2 NEW TRANSMISSIONS

At some occasions Message desk guy is asking people who call him for their phone number, if they give it to him he returns the call and ask them about the number they gave him when they called him. If reciever answers correct number he gets new number from MD guy. (sounds complicated)

One of our OTPers got called back from MD guy and got new number 899053.

MD guy is returning calls from spoofed numbers, but on this occasion he called from 202-999-3335, and that number exist (previousl he was calling from 12000000)

8/12/2012

On 202-999-3335 we found this that has NOT been decrypted yet:
http://vocaroo.com/i/s1S9k1VoICxy
http://vocaroo.com/i/s1pIH6tqiewI

9/12/2012

we found new binary song on 202-999-3335 and 303-309-0004 AGENT NUMBER 899053 (number that was given to our member on return call on his/her personal phone)

http://dialer.otp22.com/2012-12-09%2005-49%20UTC%20-%20202-999-3335%20-%20899053.wav

This has also not been decrypted yet!

Here is spectogram:
http://i.imgur.com/0Rdym.png