Author
Message
AUZ505
Unfictologist
Joined: 07 Mar 2008 Posts: 1599 Location: Germany
Rogi Ocnorb wrote:
Would you believe I looked at the stinkin' picture and didn't even notice the name?
Not making sense of the missing glyph.
To get to the sign-up, go through the first password round ("!" link and "!apw0rD" password) and select the "7764 041 307" link when it activates. The password for that link is "themis".
2 more clicks and you're there.
Just dropped in. Could someone please explain from where I have to know the second password "themis"
_________________Playing:
Posted: Mon Jan 05, 2009 8:33 pm
Rogi Ocnorb
I Have 100 Cats and Smell of Wee
Joined: 01 Sep 2005 Posts: 4266 Location: Where the cheese is free.
In the source of the page were it's being used (http://mysite.verizon.net/vzer3sd8/index_.html), there is a javascript call to http://mysite.verizon.net/vzer3sd8/pwd.js that works just like the first one encountered on the main page where it was given to us on the page.
_________________
I'm telling you now, so you can't say, "Oh, I didn't know...Nobody told me!"
Posted: Tue Jan 06, 2009 2:17 am
AUZ505
Unfictologist
Joined: 07 Mar 2008 Posts: 1599 Location: Germany
Rogi Ocnorb wrote:
In the source of the page were it's being used (http://mysite.verizon.net/vzer3sd8/index_.html), there is a javascript call to http://mysite.verizon.net/vzer3sd8/pwd.js that works just like the first one encountered on the main page where it was given to us on the page.
So the passord is found by "hacking" the javascript? Is there no way to find the password with other means? Not sure if this was intended by the PMs.
_________________Playing:
Posted: Tue Jan 06, 2009 8:06 am
natas
PHP Ninja
Joined: 06 Oct 2007 Posts: 3177 Location: Northwest Indiana
AUZ505 wrote:
So the passord is found by "hacking" the javascript? Is there no way to find the password with other means? Not sure if this was intended by the PMs.
I don't really think that's considered hacking only for the reason it took me all of 30 seconds to find it.
Posted: Tue Jan 06, 2009 9:10 am
magnet0
Unfettered
Joined: 05 Apr 2008 Posts: 398
Found the Craig's list post.
http://washingtondc.craigslist.org/nva/bks/981693441.html
I have sent off an email:
Quote:
I saw your posting on Craigslist and am interested in the journal of the Murcheson Expedition. Would it be possible to send me some photos of the pages of the journal that you do have so I can can validate it's authenticity? Is your $100 asking price firm?
_________________1 / ∞ ≠ 0
Posted: Tue Jan 06, 2009 11:06 am
BraveMax
Boot
Joined: 11 Apr 2008 Posts: 55 Location: Washington, DC; Austin, TX
He must have sent trailheads to those of us ID'd as living in/around DC (I'm in Arlington).
I haven't had time to play an ARG in a while, but it might be fun to be near one...
Posted: Tue Jan 06, 2009 2:13 pm
Nighthawk
I Have 100 Cats and Smell of Wee
Joined: 14 Jul 2007 Posts: 4751 Location: Miami, Florida, USA, Earth
natas wrote:
AUZ505 wrote:
So the passord is found by "hacking" the javascript? Is there no way to find the password with other means? Not sure if this was intended by the PMs.
I don't really think that's considered hacking only for the reason it took me all of 30 seconds to find it.
It's not "hacking", but it could be unintended to be found so easily. Not every PM out there has the capability to do server-side development in PHP, ASPX or the like. I do it all the time to find a certain PM's console commands.
Although, in future, obfuscation is highly recommended.
_________________"Omne ignotum pro magnifico"
Posted: Tue Jan 06, 2009 2:18 pm
Rogi Ocnorb
I Have 100 Cats and Smell of Wee
Joined: 01 Sep 2005 Posts: 4266 Location: Where the cheese is free.
The only reason I felt like it was okay to post the password was because it used the same method as on the main page where it was begging to have a look at the source based on the presentation.
I looked around for anything that might have established the password via other means so I could post that logic and couldn't/can't see anything.
I'm starting to rethink that position, though. The document naming conventions make me think our PM didn't plan for blocking ways we typically go about discovery as evidenced by the "Murcheson#.pdf" files.
_________________
I'm telling you now, so you can't say, "Oh, I didn't know...Nobody told me!"
Posted: Tue Jan 06, 2009 2:40 pm
AUZ505
Unfictologist
Joined: 07 Mar 2008 Posts: 1599 Location: Germany
Just one more strange thing:
The link for the union-station image is now linking to a jpg named us.jpg. Both are still on the website.
http://mysite.verizon.net/vzer3sd8/union-station.jpg
http://mysite.verizon.net/vzer3sd8/us.jpg
Seems like the image has just be renamed.
_________________Playing:
Posted: Tue Jan 06, 2009 3:09 pm
jssiegel
Boot
Joined: 25 Apr 2006 Posts: 14 Location: Washington, DC
themis and mail themis is the name of the goddess of justice and she is one of the six statues on top of union station, would have gotten their shortly after the post of the password anyways.
on another note, received a piece of mail (snail mail) today containing more entries in the journal. my scanner isn't very good but i have attached the image.
return address is 1201 Penn Ave NW DC 20004, so i think the DC area people comment is correct
[/img]
Description
themis is the name of the goddess of justice and she is one of the six statues on top of union station, would have gotten their shortly after the post of the password anyways. on another note, received a piece of mail (snail mail) today containing more
Download
Filename
entries.pdf
Filesize
2.47MB
Downloaded
148 Time(s)
Posted: Tue Jan 06, 2009 3:16 pm
magnet0
Unfettered
Joined: 05 Apr 2008 Posts: 398
Received a response from Craigslist email. Return address is murchesonSPLAT rocketmail.com.
Quote:
how would you be able to authenticate them from photos? if i show you photos of everything, i'll have no leverage, because you'll have the information. i see you're living in indiana, so a face to face meeting would be impractical.
here is what i propose, pay $25 and i'll mail you one page of the journal, and you can judge whether it's genuine, if not i will gladly refund your earnest money. if it is authentic pay me the additional $75 and i'll send the rest.
pls send me your address via email, if you agree to this. i accept paypal, through a trusted friend, and as soon as payment is verified, i'll send you the first page.
-- raul murcheson
Apparently, the 'are you in DC' theme is name of the game.
_________________1 / ∞ ≠ 0
Posted: Tue Jan 06, 2009 3:23 pm
jssiegel
Boot
Joined: 25 Apr 2006 Posts: 14 Location: Washington, DC
cypher? any one have any ideas?
"We've also encrypted and posted our email(s) & cell phone number(s) somewhere you're most likely to look. Look to use 'xpos' on the cypher."
Posted: Tue Jan 06, 2009 3:32 pm
BraveMax
Boot
Joined: 11 Apr 2008 Posts: 55 Location: Washington, DC; Austin, TX
This... Is why I don't give them my address or use my real name. And is the creepy downside of ARGs. Who wants to form a posse to go "meet" this guy in person?
Sure as hell don't want to do it alone... But I AM intrigued about getting involved a little in the real world. I've never been part of a geographically-located ARG
Posted: Tue Jan 06, 2009 4:12 pm
natas
PHP Ninja
Joined: 06 Oct 2007 Posts: 3177 Location: Northwest Indiana
murcheson is on yahoo messenger
.Murcheson
(don't forget the period) We had a very short chat, but as I'm just a lurker, I couldn't get very far.
Posted: Tue Jan 06, 2009 4:16 pm
BraveMax
Boot
Joined: 11 Apr 2008 Posts: 55 Location: Washington, DC; Austin, TX
BTW - that address is right by Gallaudet University. I'm guessing this is someone's final project
Posted: Tue Jan 06, 2009 4:41 pm
Display posts from previous: All Posts 1 Day 1 Week 2 Weeks 1 Month 3 Months 6 Months 1 Year Sort by: Post Time Post Subject Author Ascending Descending