Author
Message
aliendial
Unfictologist
Joined: 29 Sep 2002 Posts: 3438 Location: Far Far Away. Nowhere Near You. Really.
Interview With PM Hello?!
http://www.unfiction.com/compendi/intrview/ctw1.html
_________________aliendial
Posted: Tue Apr 08, 2003 9:53 pm
RPGgame
Unfettered
Joined: 02 Jan 2003 Posts: 501
thats sweet but I cant but help noticing that we should concentrate on the login at Synthasia, Anyone else see anything that we need to look at
Posted: Wed Apr 09, 2003 12:49 am
Shelina
Unfettered
Joined: 03 Apr 2003 Posts: 552 Location: Madrid, Spain
But we already have the login/pass for Synthasia, the readonly/helpme...
Have I missed something?
Posted: Wed Apr 09, 2003 6:46 am
RPGgame
Unfettered
Joined: 02 Jan 2003 Posts: 501
Shelina wrote:
But we already have the login/pass for Synthasia, the readonly/helpme...
Have I missed something?
take a look at this website
http://www.synthasia.com/login.html
Posted: Wed Apr 09, 2003 8:28 am
lanzz
Boot
Joined: 18 Mar 2003 Posts: 25
RPGgame wrote:
Shelina wrote:
But we already have the login/pass for Synthasia, the readonly/helpme...
Have I missed something?
take a look at this website
http://www.synthasia.com/login.html
type "readonly" in the field there, and you get the synaasys.html url, where you are prompted AGAIN for username and password, which are readonly/helpme. this has been solved in the first days of the game, but there might be something else in that login form, who knows.
Posted: Wed Apr 09, 2003 8:42 am
RPGgame
Unfettered
Joined: 02 Jan 2003 Posts: 501
ok my bad I thought we had the email from adifferent means. Whatever thats cool sorry for wasting peoples time
{head lowered}
Posted: Wed Apr 09, 2003 8:51 am
mottjr
Veteran
Joined: 26 Sep 2002 Posts: 122 Location: Rehoboth Beach, DE
Quote:
From the interview:
We've obviously had to stay away from puzzles that were entirely Flash-based due to the Flash de-compilers available (even though I don't believe anyone's broken the encryption scheme written into the scripting of the Flash based Synthasia password portal yet!) ...
I read this to say that even if someone decompiled the login flash file they would still have to contend with the encryption scheme which he believes is secure. I don't think we should infer that we missed anything based on this comment.
Posted: Wed Apr 09, 2003 8:58 am
AnthraX101
Entrenched
Joined: 18 Mar 2003 Posts: 797
.
Removed because too many people were getting worked up about it, and quite frankly, I can't find much other then the lack of a true 128 bit key as the whitepaper calls for. (The MD5 does give you a good avenue of attack though)
AnthraX101
Posted: Wed Apr 09, 2003 11:33 am
Last edited by AnthraX101 on Wed Apr 09, 2003 2:32 pm; edited 3 times in total
Kris
Boot
Joined: 27 Mar 2003 Posts: 37 Location: Brasilia - Brazil
And the snowball pics up some pace... I hope this doesn't start a trend. I guess people do what they want (including making the choice on reading the spoil or not), but the fact that it's up it's a sad one, in my view. We were doing fine without it. Let's keep it that way.
_________________--- If it sounds like Greek, it probably is ---
Posted: Wed Apr 09, 2003 12:24 pm
AnthraX101
Entrenched
Joined: 18 Mar 2003 Posts: 797
It doesn't really change anything, that's why I am not doing any of the other files, because those we haven't solved yet. It's simply a point to prove that simply because someone didn't do something, that doesn't mean it's impossible, especially in the security field. If we hadn't solved the synthasia portal, that's one thing. But if people do wish me to take it down, I will.
I don't feel that this changes the game in the least for most people. That's the only reason that I did it.
AnthraX101
Posted: Wed Apr 09, 2003 12:54 pm
MrDoug
Veteran
Joined: 14 Nov 2002 Posts: 74 Location: On the Outside looking in
Rant... Any time you take a high road and say, "You can't break my security" it's like waving a red flag. In this instance we almost seem to be encouraged to take a look at it. Why bring it up at all? Why make it an issue in the first place? Simply do not put anything in the flash that you do want to be found in the first place. That way if people want to spend the time taking it apart no harm is done and the wasted their time, and the PM can laugh.
Posted: Wed Apr 09, 2003 1:29 pm
Kris
Boot
Joined: 27 Mar 2003 Posts: 37 Location: Brasilia - Brazil
Flash
AnthraX101 wrote:
I don't feel that this changes the game in the least for most people. That's the only reason that I did it.
AnthraX101
OK, cool. I just got worried about the "This does give away something to the current spec, so be warned" part. But as I haven't looked at the spoil, I really don't know what I'm talking about.
Take care!
_________________--- If it sounds like Greek, it probably is ---
Posted: Wed Apr 09, 2003 1:33 pm
mottjr
Veteran
Joined: 26 Sep 2002 Posts: 122 Location: Rehoboth Beach, DE
AnthraX101 wrote:
It doesn't really change anything, that's why I am not doing any of the other files, because those we haven't solved yet. It's simply a point to prove that simply because someone didn't do something, that doesn't mean it's impossible, especially in the security field. If we hadn't solved the synthasia portal, that's one thing. But if people do wish me to take it down, I will.
I don't feel that this changes the game in the least for most people. That's the only reason that I did it.
AnthraX101
I really don't see how you consider anything cracked. All you have done is identified the algorithm and recreated the encrypted string with the answer you already knew. The encryption is still secure. You haven't done anything that would allow you to learn the password from the encrypted string.
I don't think you should lay down the smack until you have some smack to lay down.
Posted: Wed Apr 09, 2003 1:34 pm
Display posts from previous: All Posts 1 Day 1 Week 2 Weeks 1 Month 3 Months 6 Months 1 Year Sort by: Post Time Post Subject Author Ascending Descending