unforum

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

[12:48] G LOW BATTERY 11,4 Volts !!!!!
[12:48] G its used to say 11.7 volts
[12:48] G few days back

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

9/12/2012

we found new binary song on 202-999-3335 and 303-309-0004 AGENT NUMBER 899053 HERE IS THE DECRYPTED MESSAGE:

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

NEw recording of
202 204 2303
https://dl.dropbox.com/u/1593421/otp22/messagedesktwf.wav

IT DECODED AS:

"MESSAGE DESK GA"

[14:57] Lurker69 i have seen that "MESSAGE DESK GA" before somwhere...
[14:57] Ymgve uhhhhhh http://www.zarya.info/Frequencies/FrequenciesDoD.php
[14:57] Ymgve "US intelligence-related satellite near 144� west longitude, possibly including communications: One of a triplet of reported frequencies carrying similar signals from satellite in geosynchronous orbit, exact frequency not known - also reported to transmit at 256.475, 263.225, 267.550 MHz and 2242.5 MHz"
[14:59] Ymgve so the 33332 message refers to a military satellite
[14:59] Ymgve if that satellite suddenly starts sending OTP related data, I'm outta here

http://nssdc.gsfc.nasa.gov/nmc/masterCatalog.do?sc=2001-046A

**Posted:** Sun Dec 09, 2012 10:03 am

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

looks like we are back at satellites

WE STILL NEED TO GET THAT IRIDIUM SIM CARD CHECKED AND ACTIVATED
WE NEED SOMEBODY TO WITH SAT PHONE!

**Posted:** Sun Dec 09, 2012 10:43 am

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

"gurgling" noise at 6-10 seconds in 202 204 2303 had been solved

https://dl.dropbox.com/u/1593421/otp22/messagedesktwf.wav

More info: http://otp22.referata.com/wiki/202_204_2303/Investigation

[2012-12-09 22:49:25] <LordHeinrich> I looked at that as a spectrogram and didn't find anything interesting, sadly
[2012-12-09 22:49:29] <LordHeinrich> I think it's just an error tone
[2012-12-09 22:49:41] <Ymgve> LordHeinrich: no, the digital signal, the one we're trying to decode now
[2012-12-09 22:50:21] <Ymgve> the "gurgling" noise at 6-10 seconds
[2012-12-09 22:50:45] |<-- Mortvert has left freenode ()
[2012-12-09 22:51:52] <R6mco> Ymgve: fooling around with MFSK-4 without a clue, you can better buy a lot in the state lottery ; -)
[2012-12-09 22:53:20] <Ymgve> considering the other message in the same place only said "MESSAGE DESK GA" this will probably turn out to be something equally boring
[2012-12-09 22:54:21] <R6mco> I wonder why this was 'normal' rtty
[2012-12-09 22:54:41] <Ymgve> PM works in mysterious ways
[2012-12-09 22:57:24] <R6mco> Ymgve: yeah, but there are limits ... if it is a bit phreaking game... ok ... like 'crack the code'
[2012-12-09 22:57:35] <R6mco> but this is information diarrhea
[2012-12-09 23:01:21] <Ymgve> R6mco: http://de.wikipedia.org/wiki/Cellular_Text_Telephone_Modem
[2012-12-09 23:01:26] <Ymgve> see something you recognize?
[2012-12-09 23:03:21] <R6mco> 400 Hz / 600 Hz / 800 Hz / 1000 Hz
[2012-12-09 23:04:26] <Ymgve> bingo

[2012-12-10 01:06:13] <Ymgve> '\x05ME\x16S\x16\x16\x16\x16\x16' '\x05SAGE\x16\x16\x16\x16\x16'
[2012-12-10 01:06:21] <Ymgve> and I don't care enough to transcribe the last part
[2012-12-10 01:06:48] <Adah> What's this from?
[2012-12-10 01:06:58] <Ymgve> \x16 are idle chars, \x05 is start of block
[2012-12-10 01:07:07] <Ymgve> http://vocaroo.com/i/s1pIH6tqiewI
[2012-12-10 01:08:15] <Ymgve> it's a recording of someone typing MESSAGE and I bet the last part I haven't decoded will contain DESK

[2012-12-10 01:08:28] <Ymgve> the encoding is the one used in http://de.wikipedia.org/wiki/Cellular_Text_Telephone_Modem
[2012-12-10 01:09:06] <Ymgve> code used for decoding: http://pastebin.com/uR5mPgpL
[2012-12-10 01:16:27] <Lurker69> how did you find that encoding ymgve?
[2012-12-10 01:16:47] <Ymgve> Lurker69: googled a lot for the frequencies used
[2012-12-10 01:16:53] <Ymgve> 400, 600, 800, 1000hz

[2012-12-10 01:18:15] <nadando> why are all those extra characters in there?
[2012-12-10 01:18:35] <Ymgve> they are idles
[2012-12-10 01:18:41] <Ymgve> this is like a teletype thing
[2012-12-10 01:18:47] <Ymgve> sends a letter when someone presses a key
[2012-12-10 01:18:55] <Ymgve> sends an idle char if nothing has been pressed

**Posted:** Mon Dec 10, 2012 4:04 am

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

!!!!!!New SONG NEW DROP!!!!!!!

Decoded by Ymgve:

Z 100130Z DEC 12SECRET//PRJMLPL//75X5[CR][LF]OJHID/DRPUPDT//[CR][LF]SUBJ/AGENT 16041//[CR][LF]DRMP/31.852605/-106.147186/BL/HOLE//GENTEXT/DISC//[CR][LF]GENTEXEQREMARKS/1. PICKUP DROP BEFORE 130000Z DEC 12/

Next drop near Texas/New Mexico

El Paso or Ciudad Juarez

20 miles out of the city
Hank Hill, propane, cartoons
the clue was HOLE, right?

http://dialer.otp22.com/2012-12-10%2016-22%20UTC%20-%20202-999-3335%20-%2016041.wav

coords start 27.2 seconds into 2012-12-10 16-22 UTC - 202-999-3335 - 16041.wav

i think this is the song: Mason vs. Princess Superstar - Perfect (Exceeder)

the drop is around the area of 31.8 -106.1
coordinates are slightly changed for safety of our drop, visit our IRC if you are prepared to go pick it up to get exact spot
http://webchat.freenode.net/?channels=#arg

Maps:
BING
http://binged.it/TQxy1E
GOOGLE
http://goo.gl/maps/KpSbE

**Posted:** Mon Dec 10, 2012 10:42 pm

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

**Posted:** Tue Dec 11, 2012 2:06 am

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

We did our firs attempt but it wasn't successful

http://imgur.com/QxDl2
http://imgur.com/1hQ9d

**Posted:** Tue Dec 11, 2012 2:36 pm

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

more pictures:

this is what the trailer looks like: http://i.imgur.com/KuyUe.jpg
and underneath: http://i.imgur.com/OFrft.jpg
http://i.imgur.com/KCHDa.jpg
----
http://i.imgur.com/1hQ9d.jpg
http://imgur.com/JhGY5

Another drop retrieval attempt report from dedicated redditor.

Thank you all for trying. We didnt find it yet. We were able to do visit the site few times and response time was incredible.

But sadly we didnt find it... We will keep trying.

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

About black box from LV

[02:09] car7erd1ckson https://dl.dropbox.com/u/28940500/vegas%20box.zip here are all the codes that came from the box
[02:12] car7erd1ckson what i don't know is if they were decoded
[02:13] zhazha ok, thanks

**Posted:** Wed Dec 12, 2012 1:19 am

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

We are overwhelmed in all loose ends we are dealing with atm.

New Mexico Drop (we have 4th person there ATM, in less thna 48 hours since we got coordinates) (FBINSAMOSSADMI6 beat that)

Message desk guy is ON / http://vocaroo.com/i/s0ZkODBlCaXP http://vocaroo.com/i/s1XK6WaPQxrK http://vocaroo.com/i/s0pZdhmBJ3nd)

WE have 3333# numbers and stellite connection

Battery level changed to "generator connectied to charger" and is now gone

And 16041 changed to SSTV

it looks so similar to images that coastlines took, she was inches away from drop CD while taking this picture Rolling Eyes

:

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

WE FOUND THE DROP

Thx to the whole crew of OTPers: porchemonkey, borg484, echimp and anon

http://i.imgur.com/PQttM.jpg

A HOLE MAKES SENSE NOW (there is no hole in the CD, that is flash light artifact)

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

simultanously another thing is going on

after the SSTV a voice says 18001

calling agent number 18001:

http://dialer.otp22.com/2012-12-12%2006-59%20UTC%20-%20303-309-0004%20-%2018001.wav

a voice says

"131212"

calling agent number 131212:

http://dialer.otp22.com/2012-12-12%2007-07%20UTC%20-%20202-999-3335%20-%20131212.wav

"entry incorrect"

we need to call MD guy with 131212!!!!

[09:37] coastlines got it
[09:37] coastlines 13/391297/3524531
[09:37] coastlines http://vocaroo.com/i/s1PbGhWc85hQ
[09:38] XkeeperLaptop_ coastlines: what number was that from, 131212?
[09:38] coastlines yup

**Posted:** Wed Dec 12, 2012 4:29 am

bambusar · Unfettered Joined: 02 May 2012 Posts: 684

[09:34] echimp SSTV the image refers to a rail under the trailer where disk was found

CD was cleaned and is readable

[09:45] echimp_ looks like the disk contains an unbunto distro

[09:50] echimp_ contents of disk: http://imgur.com/nvfZJ

edit: links to CD

[http://pastebin.ca/2291896 <--- not very helpful
so very random
each bit has the same occurence
hahaha
http://bestmimosa.com/echimp/Track%2001.7z <---link to CD ISO
https://dl.dropbox.com/u/1593421/otp22/weirdblock.bin <---that's the 100mb isolated

https://dl.dropbox.com/u/28940500/weirdblock.bin
http://valkyrie.rustedlogic.net/otp.bin

Xkeeper · Veteran Joined: 12 Dec 2012 Posts: 87

I suppose bambusar could use some help keeping things updated.

The CD was ripped to an ISO; it's basically Ubuntu 12.04 (not 12.04.1).

<Ymgve> 0x12C00000 to 0x19000000 is different from the official ISO

What this did is basically cut a big gash through the squashfs containing Ubuntu's filesystem, so it's a fair bet right now that the Ubuntu ISO is just a wrapper around this 100 MB block of mystery meat. (Ubuntu itself is unbootable and will crash in various ways if you try.)

Here's a dump of the byte frequencies in that 100M block:
http://pastebin.ca/2291896

It appears to be pretty much random. No obvious patterns or anything. For all we know, someone just piped /dev/random into the ISO and burned it for us. Popular opinion thinks it's a TrueCrypt image though, but it's literally impossible to tell unless we have a key.

**Posted:** Wed Dec 12, 2012 1:48 pm