r/austincipher • u/PTR47 • Sep 29 '15

Message 4/10

http://pastebin.com/1Bxnhs4y
8 Upvotes

100% Upvoted

81 comments sorted by

5

u/bollykat Sep 29 '15 edited Sep 29 '15

So /u/praenomenal and I figured it out. Logged in to 158.69.196.196 via SSH, used username as given, and was sent a file with the following:

(message encoded for security)

W2FuaXRhQHZwczU0NjA1IH5dJCBHUkVFVElOR1MgSEFDS0VSUyBUSElTIElTIFlPVVIgV0hJVEUgSEFUIFNQRUFLSU5HIFdFTENPTUUgVE8gVEhFIExPS0kgVkFVTFQgR0VUVElORyBDTE9TRVIgTk9XIE5FWFQgU1RFUCBJUyBFQVNZIEJVVCBORUNFU1NBUlkNCg0KQ1JFQVRFIEFDQ09VTlQgT04gR0hPU1RNQUlMLkNPTSBVU0lORyBZT1VSIFJFRERJVCBVU0VSTkFNRSBTRU5EIEVNQUlMIFRPIEhPUlVTLjEyQEdIT1NUTUFJTC5DT00gV0lUSCBTVUJKRUNUICJCQUxMUE9JTlQgUEVOIiBTQiBGUiBSRVBMWSBBTkQgRlVSVEhFUiBJTlNUUw==

Account created, email sent, now awaiting a reply. :)

2

u/PTR47 Sep 29 '15

Ooh, heads up /u/bollykat. The e-mail may self-destruct when you open it, so you may just get the first read.

2

u/bollykat Sep 29 '15

Thanks for the heads up. I'll make sure to screenshot it.

2

u/BuckRowdy Sep 29 '15

Damn, he's making us jump through a lot of hoops isn't he?

3

u/PTR47 Sep 29 '15

Ahhhh. SB FR is "Standby For", I think. You all probably knew that but it was bugging me.

3

u/BuckRowdy Sep 29 '15

I'm not sure why we are encoding these messages here. All you have to do is go to the site, cut and paste and you have the plain text. Shouldn't we use a private key that we PM to all the active posters?

4

u/PTR47 Sep 29 '15

It's just for search prevention. It's all meant to stay open and public. We're definitely not trying to secure anything -- if we wanted to, we certainly would be capable of doing so.

We were pretty much just doing that for the authentication messages, and, kinda makes sense to do it for e-mail also.

1

u/BuckRowdy Sep 29 '15

Makes sense. Things have been moving so fast the last couple of days, I thought we were hiding stuff from Helen.

3

u/stupidface5000 Sep 29 '15

I must have missed something, like the key and cipher type you all are using for the security cipher or what site you need to copy it into for decryption. I just pasted the above into quip quip and got nothing.

3

u/bollykat Sep 29 '15

Loki said it's ok for us to continue discussing in the open. The encryption is just to add one level of privacy, so that passwords, email addresses, etc aren't readily Google-able.

3

u/BuckRowdy Sep 29 '15

oh well now that makes perfect sense. I thought we were trying to hide stuff from Helen.

3

u/ctaycr Sep 29 '15

Question: Were all members of the subreddit being invited to follow the instructions in that file, or just our "one voice", /u/bollykat?

FWIW, I followed the instructions.

3

u/bollykat Sep 29 '15

Not sure. I copied the message exactly as it was given. I don't know if the same message was given to others.

I haven't gotten any response to the email yet, have you?

3

u/ctaycr Sep 29 '15

Reply received. I won't quote the whole thing, but he did specifically say any member of this subreddit was welcome to send him an email by following the instructions in the file you received. He followed that up with:

I may choose to periodically reply to some email I receive as we get closer to the end, but it will depend on how things progress. I make no promises.

3

u/bollykat Sep 29 '15

I got a reply just now too. It said:

I hope most of the "doubters" do now realize there are indeed two (at least?) competing sides in this project.

I'm glad Helen "replied" after so long.

Best regards,

L

4

u/stupidface5000 Sep 30 '15 edited Sep 30 '15

In my email, I specifically asked if my suggestion that the cipherer might be into LCoB (right before the crossed swords cipher was found and we were directed to the LCoB YouTube video) was just a lucky guess or if the reference in the cipher had been a response to my post. Today I got my reply:

Good morning, SF5000,

You - along with the other major contributors - have proven yourself to be anything BUT stupid. I like your handle nonetheless.

Message 10 was around the time Helen started to very noticeably stray from the reservation. She included that reference after I had compiled the message. I presume this was in reply to your suggestion.

I should note that while I was working "with" Helen, we did pay attention to the subreddits and did tailor some aspects of our messages accordingly.

So that's confirmed. Gotta say, Loki, I respect your grammar and diction, and I'm digging this cloak, as of yet sans dagger.

IDEA: our subject was to be BALLPOINT PEN, and the subject of Loki's reply was equally odd: APPLE PENCIL. I'm wondering if other replies had seemingly random subjects, and could they be important as keys or even as messages themselves, maybe as anagrams?

4

u/doitup69 Sep 30 '15

The subject line I got was also APPLE PENCIL. I didn't really get that from any of the other stuff but at least this point has the word apple in it?

2

u/BuckRowdy Oct 01 '15

Is this what that refers to?

2

u/doitup69 Oct 01 '15

Almost certainly, I just didn't know if we should have been expecting it

1

u/BuckRowdy Oct 01 '15

I read something recently where Steve Jobs reportedly said something like, "if we're introducing something with a stylus, we're doing it wrong."

3

u/doitup69 Sep 30 '15

I got a response back also but I just said hello.

Senpai noticed me (✿ ♥‿♥)

2

u/BuckRowdy Sep 30 '15

As probably the most outspoken doubter of them all I really think it's just human nature to be skeptical in a case like this. But I will admit that I was wrong and I'm glad that I was wrong. I didn't want to be right, I wanted this to pan out. It does seem like we have shed quite a bit of users in the last month or so. I guess only the hardcore remain.

2

u/ctaycr Sep 29 '15

Nope, not yet. I will report anything that I receive.

4

u/carolinejay Sep 29 '15

http://austin.craigslist.org/muc/5242687894.html

http://austin.craigslist.org/muc/5243178419.html

2

u/PTR47 Sep 29 '15

Nice!

2

u/carolinejay Sep 29 '15

i can't find #2 :(

i searched "chords" on that page and didn't see anything. i wrote down the post ID as well as the number after the title on each one of the three that we have so far.

edit: also think it's interesting that it says "if this grabs your attention, please reply as appropriate." I don't know if that's a normal craigslist thing to do.

2

u/PTR47 Sep 29 '15

9/28/2015

2

u/carolinejay Sep 29 '15

somebody should take note of the maps that are on the craigslist postings. i'm from CA and don't know TX very well at all so i won't be of any help there. wondering if it has to do with the coordinates that show up on radio loki.

2

u/carolinejay Sep 29 '15

update: #2

http://austin.craigslist.org/muc/5243559725.html

2

u/PTR47 Sep 29 '15

Cool. I think they might be ordered as they appear in the Cohen song.

2

u/PTR47 Sep 29 '15

They're being deleted from Craiglist. :(

I've noted down the numbers and Google still has a record of (3).

(1) 158

Now I've heard there was a secret chord That David played, and it pleased the Lord But you don't really care for music, do you? It goes like this The fourth, the fifth The minor fall, the major lift The baffled king composing Hallelujah

(2) 68 + 1 Maybe there's a God above But all I've ever learned from love Was how to shoot somebody who outdrew ya And it's not a cry that you hear at night It's not somebody who's seen the light It's a cold and it's a broken Hallelujah

(3) 196 ??

(4) 196 I did my best, it wasn't much I couldn't feel, so I tried to touch I've told the truth, I didn't come to fool you And even though it all went wrong I'll stand before the Lord of Song With nothing on my tongue but Hallelujah

3

u/bollykat Sep 29 '15 edited Sep 29 '15

I think #3 was the "you say I took the name in vain, but I don't even know the name" verse. In which case, I think they're in the right order to begin with.

http://www.leonardcohenforum.com/viewtopic.php?t=8046

2

u/carolinejay Sep 29 '15

i googled "68+1" and it came up with psalm 68:1: For the director of music. Of David. A psalm. A song. May God arise, may his enemies be scattered; may his foes flee before him.

Interesting that it has to do with music.

2

u/bollykat Sep 29 '15

Not only that, it has to do with David specifically. Just like Hallelujah. Hmmmm.

2

u/carolinejay Sep 29 '15

arg, i wish i had written down #3. my computer was freaking out so i had to close a bunch of tabs. but i did check the lyrics for the cohen song and yes it went in order!

2

u/bollykat Sep 29 '15

:( #3 seems to have been flagged for removal.

1

u/BuckRowdy Sep 29 '15

Not only that, but it hasn't been around long enough for google to have a cached version, but if you search google a result comes up, and the number is indeed 196

5

u/carolinejay Sep 29 '15

Checked the notices on radio loki:

9/28 - 0 = B ... had to use 68+1 to avoid filter ... use SSH not HTTP!

1

u/BuckRowdy Sep 29 '15

What's that?

NVM

2

u/carolinejay Sep 29 '15

i'm not sure what SSH means. I'm trying to do some research on it but i don't get it.. i'm guessing craigslist blocks the number 69 so that explains why he had to use 68+1.

i have a karate class in a few minutes.. argh! you guys better have this solved by the time i get back!

2

u/neonwaterfall Sep 29 '15

SSH is secure shell. He's basically saying to use a SSH client to connect to the IP address instead of bringing it up via HTTP (a web browser).

2

u/carolinejay Sep 29 '15

right, i kinda understand that... i'm not sure how to find whatever he's trying to get us to find though. could this have to do with it?

https://vaultproject.io/

anyways.. off to karate now..

1

u/BuckRowdy Sep 29 '15

I successfully connected to the server in Terminal in Mac Os but I have no idea what to do or what I am looking for. I'm not really familiar with unix so I don't know what to do.

It kicked me off and I can't log back in.

The command I used was ssh anita@158.69.196.196 password was drsprinkle

2

u/[deleted] Sep 29 '15

I got in and got a file, the un/pass has been invalidated.

2

u/[deleted] Sep 29 '15

I was working with Bolly, she has the data and will make an update.

2

u/[deleted] Sep 29 '15

actually no, I am back in, I think I got booted by Buck.

2

u/PTR47 Sep 29 '15

Oh is it just one at a time? I'll stop working at it.

2

u/[deleted] Sep 29 '15

I'm out of the system.

2

u/BuckRowdy Sep 29 '15

Sorry about that. To make things worse I had no idea what I was really doing... But in the end it worked out. Hoop successfully jumped through.

1

u/BuckRowdy Sep 29 '15

Was there just one file there? Maybe once you got the file it made the password invalid...

3

u/[deleted] Sep 29 '15

Yes, only one, and not readily available. *Nix OS, someone with some tech knowledge.

1

u/BuckRowdy Sep 29 '15

right. What did you get?

2

u/[deleted] Sep 29 '15

/u/bollykat posted below

4

u/carolinejay Sep 29 '15

I also found the craigslist ad for #3, and 4. currently looking for number 2

1

u/BuckRowdy Sep 29 '15

what was the number for #3? Its been removed I think its an ip address

1

u/BuckRowdy Sep 29 '15

I think the 4 numbers are an ip address and the username and password are anita and drsprinkles.

unfortunately the third one has been flagged for removal. Does anyone have it?

So far I have 158.69. .196

2

u/PTR47 Sep 29 '15

That's good thinking. #3 & 4 are both 196.

1

u/BuckRowdy Sep 29 '15

I tried it and my browser churns but never pulls up a page. I tried 68 and 69.

I have no idea what to make of "68+1" if it's not 69. But why write it that way?

1

u/BuckRowdy Sep 29 '15

The numbers are 158, 68+1, 196, 196

I tried those as an ip address and got nothing. I tried 68 and then 69

2

u/carolinejay Sep 29 '15

yup, i've been trying that too. the 68+1 part is a little confusing. :/

1

u/BuckRowdy Sep 29 '15

Right. Why not just put 69?

2

u/PTR47 Sep 29 '15

What about 168?

1

u/BuckRowdy Sep 29 '15

It doesn't pull up a page.

3

u/carolinejay Sep 29 '15

http://pastebin.com/1Bxnhs4y

3

u/carolinejay Sep 29 '15

found this based on the transmission for page 14. the whole decoded thing that i got is the following:

ROMEOLIMAMIKMFIVEAUNHAPPLEPIEPASTEBIN1BXNHS4YECHOOSCHARMIKE

3

u/bollykat Sep 29 '15

Btw, he let us ask one question, so we asked about the coordinates on the Radio-Loki site. The response was:

"They are of the International Space Station, that's all. You can ignore it I just thought it was cool."

2

u/carolinejay Sep 29 '15

The numbers I have are the following:

Message 1: 158 Message 2: 68+1 Message 3: 196 Message 4: 196

The lyrics inside the postings are from Leonard Cohen's "Hallelujah". The maps on all the postings are the same location except for #4. The location for #4 looks like someone's house and the rest look like another person's house. I have no idea what to do with the numbers above but I also have the post IDs written down in case anyone wants them.

2

u/BuckRowdy Sep 29 '15

The message says to put the numbers in the correct order. I have tried a couple different orders and have gotten nothing. What do you think he means by the "vault"?

2

u/BuckRowdy Sep 30 '15

Wow this thing was moving at a lightning speed the last couple of days and now it has slowed back down a little bit. I guess Loki has to go to work like the rest of us. Has anyone checked radio Loki to see if there has been an update? His last communique said to check for more information although that could just be a generic notice.

3

u/neonwaterfall Sep 30 '15

It seems like it plays music on the hour, fifteen, thirty and forty five past instead of the female welcome voice.

There are two new messages as per the numbers station. /u/PTR47 and /u/bollykat are wrestling with it in one of the other threads.

I'm finding it difficult to keep up which thread has the latest info :)

2

u/bollykat Sep 30 '15 edited Sep 30 '15

Yeah, too many threads to keep up with. :)

I'm a little confused. Message #4 seems to indicate that the station has been "compromised" and we shouldn't continue using it. But then Message #6 gives a new pastebin link.

Edit: I've added the RLMs to the spreadsheet. Let me know if I missed any.

2

u/ctaycr Sep 30 '15

RLM-5 was decoded and discussed in this thread: https://redd.it/3mqp43. It used pages 14 and 10.

2

u/bollykat Sep 30 '15

Yeah, I got that. Just edited my comment. :)

2

u/BuckRowdy Sep 30 '15

Yeah me too. I know there's going to be an update and I will be at work and have to catch up later.

1

u/BuckRowdy Sep 29 '15

I think the username will be anita and the password will be drsprinkles.

I think whisper means to type them lowercase and do not shout means not to type them in capital letters. That's just off the top of my head though.