Close

Does this project spark your interest?

Become a member to follow this project and don't miss any updates

Lets Solve Hackaday.com/Space!

I figured I would start a project to crack the mystery that is hackaday.com/space.

118 87 50
Enjoy this project?
Share on twitter   Share on Facebook

This project was created on 04/08/2014 and last updated 4 months ago.

Description
On April 1st (april fools day) Hackaday redirected visitors to a mysterious screen (seen at hackaday.com/space) that is obviously part of a prank/easter egg hunt/fun adventure. I figured we could log our progress cracking this mystery here. If you would like to be a project contributor, just let me know and I will add you.

Please post any new findings in the comments so I can make updates as we progress. I will also make you a contributor to help move this thing along!
Project logs
  • Well that was fun :)

    4 months ago • 2 comments

    For those of you who have not noticed, Hack A Day announced the Hackaday.io/prize competition to go to space! They have also been explaining in HaD posts how this whole hackaday.com/space ARG was a "pre-game party" for the announcement of their competition to go to space! Pretty sweet if you ask me. This will likely be the last project log, I just wanted to have one last update to conclude things for anyone reading this in the future.

    Hack A Day Official Explanations of ARG Transmissions:

  • Spoiler - Final Transmission - Major Tom's Diary

    4 months ago • 0 comments

    For those who do not have Minecraft. (This was posted in the comments and taken from http://pastebin.com/JjmKfR6e)

    1:

    Herein are the

    Cronicles of

    Major

    Joshua

    Tesla

    Tom

    ----

    2: No sooner do I publish details about my launch vehicle do I get slapped with a patent warning. Really, having the engine on the bottom of the rocket is patented?

    ----

    3: I have come up with a brilliant solution. While the current situation prevents me from putting the engines at the bottom of the rocket, the language used in the previous patents say nothing about putting the engines at the top of the rocket.

    ----

    4: I have moved the engines to the top, and the capsule to the bottom. Of course the vehicle will be rotated for launch, but all is well. In keeping with the patent warnings, I have now rotated all diagrams 180 degrees.

    ----

    5: The new vehicle design works brilliantly. Unfortunately, the lawyers do not see my solution as unique, and have filed suit in east Texas.

    ----

    6: Although I'm building for personal use the cease and desist letters are getting more and more aggressive.

    ----

    7: Able to stand it no longer, I have launched my space station months earlier than planned. Out of the jurisdication of any nation I should be safe to build whatever I want.

    ----

    8: So far the microgravity environment has proven challenging for a number of simple tasks. There is now solder flux in the atmospheric recyclers and using the CNC router causes a slight rotation in the station around the forward axis.

    ----

    9: I feel I am getting the hang of working in a zero gravity environment. I have noticed a small fault in the vehicle's abort switch which I believe to be a loose solder joint. This must be fixed befire I can continue my research.

    ----

    10: I have come up with an elegant solution to the abort switch problem. If the computer is manually placed into an abort condition, I may continue using the flight computer as it will never trigger an abort. Genius.

    ----

    11: There has been a main bus fault. Thrusters are gone, as is the navigation computer. Main computer will require extensive repairs.

    ----

    12: ex appiars i hazi s{exchih xdi xderh anh joyrxd haxa leni.

    # (it appears I have switched the third and fourth data line)

    ----

    13: The previous situation has been resolved, altough I am currently dealing with several other mechanical problems on the ship.

    ----

    14: I have repaired as much as I can inside the ship, but the repairs now require me to EVA and fix the remaining systems. I do no like extravehicular activities. Last time the comms circuit died.

    ----

    15: The problem on the exterior has been resolved, thanks to a few comms from a good friend back on the blue earth. The defective component was a 709, luckily I had the spares. Bob will get back to me on the cause of the failure.

    ----

    16: Some readings from my transmission testing leads me to think others have been decoding my communications. Who would take the time to intercept and decode all of my messages?

    ----

    17: I grow weary of both waiting and worrying. If rescued I plan to start my search for someone to replace me. Maybe a more skilled soul can keep this place running, without interfering with their quest for discovery.

  • Final Transmission

    4 months ago • 6 comments

    For those of you who haven't noticed, the final transmission was posted a few days ago. The transmission was simply this picture:

    The numbers in the picture represent the IP address and port number: 50.112.128.47:25565, which happens to be a minecraft server!

    On the server there is a myriad of puzzles for us to solve. It seems most of them have been solved, but it is still a lot of fun to go find them all!

    When a collection of photos has been gathered, I will post them here.

View all 12 project logs

Build instructions
  • 1

    Review Previous Logs.

  • 2

    Join IRC channel ##hackaday on freenode. 

Discussions

jakaruni04 wrote 3 months ago 2 points

how we can call people on space ship?

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago 2 points

So this all culminates in this announcement:
http://hackaday.io/prize
That's a pretty sweet grand prize.

Are you sure? [yes] / [no]

Lambda42 wrote 4 months ago 2 points

After reading Tom's Diary in the End and seeing what I've seen around the world, I wonder if this is a recruiting campaign. The last page looks like some of the HaD guys may be leaving.

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago 2 points

"If rescued I plan to start my search for someone to replace me. Maybe a more skilled soul can keep this place running, without interfering with their quest for discovery." That's what makes me think that too.

Are you sure? [yes] / [no]

redsquirrel_7 wrote 4 months ago 1 point

Who do you suppose could be leaving?

Are you sure? [yes] / [no]

DarylDee wrote 4 months ago 2 points

Maybe something related to the mars mission?

Are you sure? [yes] / [no]

redsquirrel_7 wrote 4 months ago 1 point

Are you suggesting one of the HaD staff could be on the up coming mission to mars?

Are you sure? [yes] / [no]

DarylDee wrote 4 months ago 1 point

yeah! stargazin' : )

Are you sure? [yes] / [no]

Sheldon wrote 4 months ago 1 point

So those of us without MC (or a good enough internet connection), any chance someone could at least stick up some of the images for these marvellous locations that the HaD gang have created (and even some of the pixel art that's there would be nice)?

(Thank you to whoever added the IRC auto-logging, us peasants have not been entirely out the loop :-)

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 2 points

The auto logging was me. I also posted an album of pics from the server in one of the project logs.
I don't have much of the pixel art but I'm sure after judging that HaD will post something. The album below may or may not be missing some of the secret locations. Sorry it took so long but I wanted to wait for the countdown timer.

imgur.com/a/55wUV

Are you sure? [yes] / [no]

Sheldon wrote 4 months ago null point

Thanks Mike (getting the early notice via the logger has been very cool - even the "keeping mum" on the annoucement :-)

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 1 point

Hidden arduino anyone?

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 2 points

MAJOR TOM HAS BEEN FOUND

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago 1 point

Nice! Where was he?

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 1 point

In the end

Are you sure? [yes] / [no]

jstylen wrote 4 months ago 2 points

When you get to the end portal you can relog to avoid fall damage. Doesn't seem like the right way but it works.

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago null point

recently fixed

Are you sure? [yes] / [no]

johnowhitaker wrote 4 months ago 2 points

Serious spoiler for those without minecraft: rawe transcribed a diary (Major Toms) - http://pastebin.com/JjmKfR6e

Are you sure? [yes] / [no]

redsquirrel_7 wrote 4 months ago 3 points

They are totally building a spaceship guys! ;)

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago 2 points

Yeah I got the same thought about this !

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago 1 point

Could you explain a little bit how we should read this ? Perhaps you have already said it on the IRC (I couldn't connect at it today because I use tor at work) but I would like to know what about the resistors ?

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 1 point

The resistor codes are part of the puzzle. I am not too sure. I have not been on the server much. I will be on later this evening. You can view the IRC log (link to the left). It is updated every ~5mins.

Are you sure? [yes] / [no]

crener wrote 4 months ago 1 point

http://hackaday.com/2014/02/14/call-for-hams-and-hackers-welcome-iceisee-3-home/

My guess is that Hackaday is going to try to communicate with this and that the announcement will be them telling us about there plan or asking for help with it.

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago 4 points

nmap scan : Minecraft 1.7.2 (Protocol: 127, Message: Find Majort Tom!, Users 2/100)

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago 1 point

Last transmission on home page of hackaday.com.
Here is a link in case it's get removed : http://imgur.com/kNVyggq

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago 2 points

It's a minecraft server 50.112.128.47:25565

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago 1 point

I received a mail this morning from hackaday saying I won a badge for decoding #Transmission01. In the mail it is written "Sweet!" in hexadecimal. Anyone got it too ? I've never decoded #Transmission01, I'm just following the quest to see where it is going (and trying to participate when I can).

Are you sure? [yes] / [no]

Lutan wrote 4 months ago 1 point

I joined some hours ago and I'm quite confused about what is happening here. And where is the solving of the mystery stuck?

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

This project page is dedicated to collating information relating to the Hackaday.com/Space mystery, and we are currently waiting for the next "Transmission" tuesday. Check out the project logs and the various transmission pages linked above to see how it all began

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago 1 point

I wonder if they are planning to launch a satellite into space? A HaD satellite would be really cool, and in the realm of possibilities.

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago null point

Very cool.

Are you sure? [yes] / [no]

Beamsjr wrote 4 months ago 1 point

the launch site is Baikonur, Vostok-2M launches occurred at Baikonur, which carried the Kosmos-1242 satellite which is supposed to fall to earth April 28th

Are you sure? [yes] / [no]

dukctape wrote 4 months ago null point

I don't wan't to be "that guy", but... http://imgur.com/iXiOYhz
In all seriousness, it may be worth looking at the stars in the image. Could they indicate a location of some sort? Admittedly the transmission has already been decoded, but you never know...

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

I'm not an expert at this, but it looks like there is more info embedded at the end of this JPEG file. Anyone who knows better than me may want to take a look: http://hackadaycom.files.wordpress.com/2014/04/nutrimatic-drink-dispenser-sci-fi-feature-thumb.png

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 1 point

It's a png :(

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

oh duh, im an idiot. I need to get some sleep, haha

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 2 points

There is still hidden text in images though.
In today's post. I'm not sure I trust the author though haha :)
"Nice try, but there's no clues hidden here."

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago 4 points

Well looks like thats the end of T#03! I will be keeping my eyes open for a minecraft server come tuesday

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago 2 points

That will be interesting.

Are you sure? [yes] / [no]

johnowhitaker wrote 4 months ago 2 points

For those not on IRC:
5 mp3s contain the following words:
1) Earth, Farad
2) Joule, Circuit
3) Amp, Gain
4) Electron, Capacitor
5) Dialectric Doide

found hackaday.com/earth
hackaday.com/circuit
circuit.jpg has some data hidden in it with a program called jphide. Trying to view it with jpseek but no luck guessing the password yet. If you want to give it a crack download the program from http://io.acad.athabascau.ca/~grizzlie/Comp607/programs.htm and please join ##hackaday @ freenode to let us know if you have any luck!

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago null point

Have you tried to brute force it with stegbreak?
I'm in the process of doing that now.

Are you sure? [yes] / [no]

Sheldon wrote 4 months ago 1 point

The original from which circuit.jpg was taken:
http://bunniestudios.com/blog/images/pic/security_fuses.jpg

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 1 point

Stegdetect is know to produce false positives for jphide.
I tried stegbreak last night with the normal rules and the word we had, but nothing.
My stegdetct 0.6 at work returns negative.
Those posts are really old. But The circuit image while really old, I can't find with google, wayback machine doesn't see the page, maybe just private, maybe part of the game, I dunno.

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago null point

I attempted to clean up the MP3s as best as I could with Audacity, you can get them here:
https://drive.google.com/folderview?id=0B6QxbmaAgfWLZ1ZWZ2xrVGpua3M&usp=sharing

the 1X and 2X folders contain the processed audio files, I used the "Auto Duck" effect using the Duck.aiff provided.

Are you sure? [yes] / [no]

johnowhitaker wrote 4 months ago 1 point

Noise reduction seems to work pretty well as well. Still can't make out 3 though...

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

I was actually about to post the same thing. That is the same vibrating/buzzing hackaday astronaut emblem from the hackaday/space transmissions. I would not be surprised if there is data hidden within

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago null point

I saw that too, and found the famous ffd9 into the hexdump of the pictures. But since it's a png, and I don't know a lots of things about pictures format, I don't know if it's relevant...

Are you sure? [yes] / [no]

Sheldon wrote 4 months ago null point

Has anyone else looked at the js files used on the Space page?
I just had a nosey in the space.min.js and saw some curious text strings. Comparing them with the coordinates that Callum mentioned (http://hackaday.com/2014/04/15/119822/#comment-1352483), I wonder if it is of interest.
"
Confirming 18.344167 -66.752778... Done.
Confirming 34.078749 -107.618283... Done.
Confirming 43.826167 41.586683... Done.
Confirming 50.524722 6.882778... Done.
Confirming 52.908889 6.868889... Done.
"
This is followed by a set of hex keys ("test block 1") followed by a binary array ("test block 2") which, despite squinting lots, I can't quite tell if it's a skull & cross-bones (could be a QR code - I can't be bothered to convert it).

... or is looking at the js considered cheating? :-)

Are you sure? [yes] / [no]

tfx2 wrote 4 months ago null point

The coordinates were from the first Transmission. They are five radiotelescope sites, with the differences being the LOFAR test field instead of the LOFAR core (Superterp) and the Very Large Array of the NRAO instead of Green Bank Telescope.

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago null point

It is a QR code, it contains the URL to Major Tom's page.

Are you sure? [yes] / [no]

Sheldon wrote 4 months ago 1 point

Thanks guys - I just spotted that this was (partially) mentioned in the Major Tom homepage (I now see "test block 1" is a garbled ASCII version of "I'm floating in a most peculiar way")
This almost feels like work with it being documented in many, many different places - hard to keep track of it all :-)

Are you sure? [yes] / [no]

Kernelpanic wrote 4 months ago 1 point

The audio files are full of noise due to the logo. It sounds to me like the words are circuit related.
1: Earth, Farad,
2: Joule Circuit
3: noise
4: electric capacitor
5: noise
I opened the files in audacity hoping to subtract the log to clean the files up. (but I don't know what I am doing.) I have tried inverting one file and adding it to another to remove the noise used to make the logo, but that didn't work.
The timings of the files are different. Different lenghts, pauses between words, start times of the actual words.
File 3 only has a spectrum up to 5kHz, all other files have a spectrum up to 20kHz.
File 3, and 5 seem to have been slowed down, or the pitch lowered. I haven't made any progress reversing that.

Are you sure? [yes] / [no]

Jonathon ("reConfigured") wrote 4 months ago null point

what about #5: dielectric diode???

Are you sure? [yes] / [no]

Kernelpanic wrote 4 months ago 2 points

Rab-- (irc) figures out the encryption is aes-256-cbc with a pass phrase of "Im floating in a most peculiar way"
it is quickly obvious that decrypted files are mp3
rawe_t30 finds the comments are:
1) Transmission received at T-1090800.0222786265106846
2) Transmission received at T-1090800.0296872268554892
3/4/5) No Transmission
Emerica finds the awsome logo.
Emerica: ffplay the file
Emerica: i work for tv company, that was first insticnt, and it blew my mind

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 1 point

http://imgur.com/a/xXQKP

Thank you hackaday, for once again, blowing my mind.
I was hoping for explosions or something by the end of all of these due to the work involved by both sides. But something in my brain has blown already.
Seeing your logo like that, just awesome. Well done.

Are you sure? [yes] / [no]

Emerica wrote 4 months ago null point

http://imgur.com/2q4DPLK

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago null point

Not sure if its relevant or not but that second list was missing an entry and had an extra. I re-plotted both lists and made a line between the two that don't appear on both lists. (green bank and VLA)
https://mapsengine.google.com/map/edit?authuser=0&hl=en&mid=z4sbLpGbiOA0.kq1iu_5MBz0g
flight path?

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 1 point

The encrypted data in the the other images which we are looking at now. ##hackaday @ freenode. Cipher and keys still at large, so far.

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago 2 points

Found a PNG image embedded in the http://static.projects.hackaday.com/images/7695601397543604668.jpg on the Transmission #03 page. It starts at file offset 0x1BAC8, 0xC24 bytes long, it looks like some sort of tile map. Maybe some metadata goes with it?

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 2 points

Yeah we found that, you might have to suit up...
Kinda looks like a game texture to me, maybe a skin...... heh

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago 1 point

I took a look at all 5 of the pictures posted as well as the Transmission #03 picture in OpenPUFF using they keyfile from the Telnet server. I am not an expert with this sort of thing, but I wasnt able to find anything right off the bat.

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago null point

https://imgur.com/a/vy6fO

on http://hackaday.com/2014/04/15/119822/#comment-1351695.. there is a SCI-FI Contest section to the right of the page, and it indicates Project Idea 129 - A Terrestrial Ansible.. the image is of a telescope

Are you sure? [yes] / [no]

Sheldon wrote 4 months ago null point

I've been scratching my head about the "project idea" image and link at the side- they've always linked to the main sci-fi contest page and had 'junk' idea numbers (the previous one was to creating "YT's skateboard" but, like the current #129 - it doesn't exist).

Are you sure? [yes] / [no]

Sheldon wrote 4 months ago null point

Oo, luckily I had an old tab open - for reference, the last one was for "Project Idea #325 - Build Y.T.'s skateboard"

Are you sure? [yes] / [no]

Tyler Anderson wrote 4 months ago 2 points

Transmission #3 Telescopes:
1. Green Bank Telescope (National Radio Astronomy Obervatory)
2. Arecibo Observatory
3. LOFAR Superterp (Netherlands Institute for Radio Astronomy)
4. Ratan-600 (Special Astrophysical Observatory of the Russian Academy of Sciences)
5. Effelsberg 100-m Telescope (Max Planck Institute for Radio Astronomy)

Original GPS Coordinates:
1. Arecibo Observatory
2. Very Large Array (National Radio Astronomy Obervatory)
3. Ratan-600 (Special Astrophysical Observatory of the Russian Academy of Sciences)
4. Effelsberg 100-m Telescope (Max Planck Institute for Radio Astronomy)
5. LOFAR Test Field (Netherlands Institute for Radio Astronomy)

Are you sure? [yes] / [no]

RodolpheH wrote 4 months ago 2 points

Tonight, planet Mars will be closer to earth than the rest of the time. Could it have some links between this event and the hackaday space enigma ? I will watch the red planet tonight, hoping to see the HaD logo appear on the surface :)

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago 3 points

I suspect it was an accident (logged in as the wrong user?) But I did notice this http://hackaday.io/project/80-HackASpace#j-discussion-1474

Maj Tom at least knows how to solder....

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 1 point

Yea I just saw that as well

Are you sure? [yes] / [no]

Kyle Brinkerhoff wrote 4 months ago null point

whos face and what circuit is that in transmission 2?
face is at 2sec
circuit is at 5sec me thinks its something about adding noise to the audio and subtracting it to encode a voice message.....

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago null point

http://hackaday.com/2014/04/08/heroes-of-hardware-revolution-bob-widlar/
a little google foo will yield the answers you seek.

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 2 points

5:48 AM Next transmission is in 5 days and 12 ours
5:53 AM The T-xxxxxx is the time until launch of the rescue mission. Transmission #3 is just 5.05 hours before launch! Therefore it is likely that Transmission #3 is the last transmission

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 1 point

EST

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago null point

Thanks for adding me as a contributor. Most of data I gathered from T2 is on the T2 page. (Possibly already copied into project logs)

Are you sure? [yes] / [no]

cadeldarkon979 wrote 4 months ago null point

I got the HD dump! This isn't everything, but everything "bob" could access is here. I tried it, it has enough for a chroot session.
Link 1: http://depositfiles.com/files/vyhn9x8ei
Mirror: http://1drv.ms/1ksqGqd

Are you sure? [yes] / [no]

dmlanger wrote 4 months ago null point

I just got an email from HAD with this: http://i.imgur.com/dUrLrVH.png
The numbers there (53:77:65:65:74!) are translated to S:w:e:e:t!
I dont think it's another clue but we never know?

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

Yeah im not sure if it is a clue or just a cool badge for our profiles.

Are you sure? [yes] / [no]

rawe wrote 4 months ago null point

I've got that 2nd badge too, but not the mail; The mail for the 1st badge (received twice with slightly different formatting once directly to me and once me in bcc (?!)) was similar (including 53:77:65:65:74! ).

If you go back on hackaday.io/feed there were 53 #1 badges and 29 #2 badges (numbers from memory, could be wrong +/-). First I thought only the ones who got the 1st badge can go on, but it looks like everyone who contributed to one of the challenges in a way got a badge. The intersection of those two badge-receiver groups could be interesting.

I wonder what mechanism is used to select who gets the badges... is contributing on the irc channel enough (how to deal with different nicknames irc/hackaday.io?)? Is it necessary to post comments on Majortom/T#2 hackaday.io pages? Someone on irc mentioned to work for hackaday some days ago, on telnet server there was an ssh session open to an ip owned by supplyframe...

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

A lot happened over the past day or so. It seems like much of the Transmission #02 clues have been discovered, so its definitely time for an update to this page. I have an exam coming up though, so I do not have time to collate all of this information into a project log. I have made many of you contributors, so if one of you would like to do that, feel free

Are you sure? [yes] / [no]

mikeneiderhauser wrote 4 months ago 1 point

Copy message from Ground Control: Transmission 2:
Major Tom, this is Ground Control. Message received.
Rescue mission planned, crew selection progressing.
Next communication at T-18180

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago null point

493 km is on the edge of LEO, I'm convinced something to do with Apollo 11 and the open dsky project at this point (given the jpg and the source code and mission control profile pic) . Still looking for Apollo 11 flight plans and looking at Maj Toms profile pic, which I think remains unsolved and is probably a simple shift and subtract operation in gimp.
bed for me though, gl
Sy out.

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 1 point

http://embeddedsw.net/OpenPuff_Steganography_Home.html
Keyfile should have the keys you need.
So far only transmission #2 image appears to decode.

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago 1 point

Oh this is gold. Definitely onto something here

Are you sure? [yes] / [no]

Emerica wrote 4 months ago 1 point

See the transmission #2 page guys,
Puff is a fan of OPEN source.

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago 1 point

Oh
Does this look familiar?
http://hackaday.io/project/294

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago null point

Puff may be a ref to the space-x launch 14 April 2014
t -7 days

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

is this a full copy of the directory on the Telnet server? I will add it now

Are you sure? [yes] / [no]

SickSad wrote 4 months ago 1 point

It's not quite a full copy as I forgot to add the dot files, although I suspect they aren't too relevant.

Are you sure? [yes] / [no]

Emerica wrote 4 months ago null point

Puff the magic dragon, has led us to new information.

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

I have just made you a contributor, so feel free to post that information here or as a project log if you wish

Are you sure? [yes] / [no]

Tyler Anderson wrote 4 months ago null point

OpenPuff (http://embeddedsw.net/OpenPuff_Steganography_Home.html) decodes the Transmission #02 image. The keys from keyfile are passwords A,B, and C. Use maximum JPEG bit selection.

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago null point

from a comment from "filmer" on one of my posts regarding the javascript page you get before you can plug in your email address

....The "input sources" in the /space page are coordinates for space telescopes/observatories:
Arecibo telescope, NRAO Very Large Array, RATAN-600 radiotelescope, Effelberg, and Exloo/Lofar....

wondering how that plots on a map but probably the telescopes themselves are the clue.

Are you sure? [yes] / [no]

Sy Bernot wrote 4 months ago null point

http://goo.gl/5TMBXd

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

Interesting find! I will add you as a contributor to this project as well

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago null point

Whoever Scott and Emi are, seriously change your FTP password.

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago 1 point

@phreaknik I transferred by using SFTP to my Raspberry Pi (exposed to the world) then to my Windows box over FTP. Kinda a hassle. I tried netcat file transfer since it has netcat ("nc") but that didn't work for some reason.

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

Thats weird, I havent been able to get an SFTP connection through... are you connecting to port 23?

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago 1 point

@phreaknik - I use SFTP from the HackADay computer to my Raspberry Pi

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

Ahh! tricky! Got it working, thanks!

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago 2 points

Going to bed. Best of luck to you all.... you're doing God's work. =P

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago null point

LMAO who is trying to write Hello Kitties everywhere??

Are you sure? [yes] / [no]

cadeldarkon979 wrote 4 months ago null point

Once my slow SCP command runs, we will have a complete hard drive dump of all the files that can be accessed by bob, easily enough for a chroot, if someone wants to find out more about what has been done with this machine. Other than that, I'd like to know what other people are doing.

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago null point

I just took a peek at the Apollo32.png image in a hex editor and through a steganography detection program. Found nothing. EXIF data says it was created in GIMP. That is all. =P

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago null point

Looked into the keyfile a bit. The codes aren't any known hash according to Hash Identifier (https://code.google.com/p/hash-identifier/) but there's a good chance it's a TrueCrypt keyfile. There could be a hidden TrueCrypt volume accessible somewhere on that drive.

Are you sure? [yes] / [no]

tehaxor69 wrote 4 months ago null point

I'd like to know what /AGC/doc/images/CodeBlocks.png is.

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

I was thinking a TrueCrypt directory also, but havent got around to figuring that out yet

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago 1 point

@ tehaxor69

I got both of those pictures for you and posted them at the top of this page (until I have another project log I can put them into). One picture is a screenshot of codeblocks with the apollo guidance computer loaded, the other is a picture of the apollo guidance computer itself. Not sure if they are useful

Are you sure? [yes] / [no]

jon.armani wrote 4 months ago null point

The home directory contains a file "reminder.txt" which has the lyrics to Puff the Magic Dragon, a file "keyfile" with 3 x alphanumeric (looks hexadecimal) codes, maybe SHA-x or MD5 hashes, plus a directory "AGC" with a bunch of program files that looks like it's to install the virtual Apollo Guidance Computer, though the "configure" file doesn't work. Not sure where to go from here.

Are you sure? [yes] / [no]

cadeldarkon979 wrote 4 months ago null point

Just an interesting note, this is hosted on an amazon EC2 Instance. To be exact, ec2-54-241-0-25.us-west-1.compute.amazonaws.com. Full nmap report is at http://pastebin.com/j8weraCE.

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

Hmm, idk what to do there. Maybe someone finds this useful though

Are you sure? [yes] / [no]

cadeldarkon979 wrote 4 months ago null point

The only reason I thought this might be useful is it shows that this machine is not directly "ground control" to anything physical, it would have to be via ethernet. Most likely just set up to draw attention to transmission two, and amazon EC2 was used as HaD didn't want to waste their bandwidth. I will try to get a home directory dump soon, writing a custom script to transfer files through telnet.

Are you sure? [yes] / [no]

phreaknik wrote 4 months ago null point

Ok, how are you transfering the files. I have been banging my head against the wall for a while trying to figure that out

Are you sure? [yes] / [no]