![]() |
Administrators :TheIsland, ILovedEko | |
| Forum Lost Island |
Not logged | Login
|
|
| Online:There are 6 online. Click here to see more | ||
Register |
Profile |
Private messages |
Search |
Online | Help
| Create a free blog | ||
![]() | ||
|
| ![]() | ![]() |
| Author : | Topic: Landalan.org | Bottom |
| manar Posts : 721 Hacking Microsoft.com |
I'm posting this ARG after playing for more than a month now , yesterday it just passed a milestone passing from the trailhead to a Game , the first posts I will be adressing just the trailhead , I hope many of you will join the fun , while waiting for OWA flight 108 , I will try to make the posts as spoiler tagged as I can so anyone can play it from the beginning , many of the stances in this post will be taken literally from the unfiction forums where this game is widely played . [LANDALAN] www.landalan.org trailhead The trailhead was first published in PS3Forums : http://ps3forums.com/viewtopic.php?t=27761 The link does not exist anymore though , and then published on July 21 at the unfiction forums , where most of the action is taking part . Clue 1 : An invisible link in the original landalan.org page reads "yzgu.fvahg" wich roted backwards provides : landalan.org/tunis.html Hidden between the words is : Please help me escape For reference , Tunis was captured by the Turks in 1534 and Mulai-Hassan was the Sultan of Tunis and fled to Charles the 5th, who reinstated him . africancities.net/tunis/php/history.php Clue 2 : In the main page source code : <!-- There is more to the style of this page than there appears --> Looking at file style.css and reading the first letter of each tag we get : future.html next destination is : landalan.org/future.html then . Clue 2.1 : Still in the main page filling the main landa.gif picture with a dif colour provides the link landalan.org/internet.html Clue 2.2 : In the source code of the main page , we have : ********** In the ages of democracy, and the endless files of a bloated government, much is looked over. Behind each closed door is a story to be told - every file leads somewhere. ********** Clue 2.3 : On tunis.html in source code we have a unique tag : <span class="absolutely_normal">sewer</span> Trying landalan.org/sewer gives the three branches page wich yields with the : "Behind each closed door is a story to be told - every file leads somewhere" statement . Clue 2.4 : on internet.html we get the abilene pic , after some fidling we get CTPOИTEЛЬНЫЙ_OБЪЕKT , wich roughly translates to : "Building object, construction object, building works, building establishment ..." and also Syn wich we supposed was for Synonym , anyway the picture updated later , doing a contrast fill on the map then yields invisible ink cyrillic words. It means project. Entering that takes you to the three branches screen. link : landalan.org/project Clue 2.5 : On future.html the same word is being repeated in different languages , we are supposed to know wich ones , the order is : Italian German English French Spanish Portuguese Taking the red lines gives "terminate" : landalan.org/terminate The blue lines are the end of the word . Clue 3 : On terminate we must enter the correct 3 passwords . the working combo is : terminate sewer project . wich leads to : landalan.org/terminate/maze.html Now we know that each file leads somwhere so the same combo on : - project gives landalan.org/project/colors.html - sewer gives landalan.org/sewer/log_updates.html Clue 4.1 : The ISP Compliance Maze is made of ISP names (doh !) you can get : SAVVIS / NIPPON / LEVEL3 - Blue / GLBC / QWEST / ATT / ATDN - White / SPRINT / VERIZON On August 1 the page tittle changed to "Wei-Hwa's Maze" . Wei-Hwa seems to be a guy who does puzzles "http://solvepuzzles.googlepages.com/" , and he did post one on June 23rd, 2006 "http://solvepuzzles.googlepages.com/puzzle5" . Wich has the same sort of grid . Using the path described for the solution 2 to wei's maze. The letters then spell out 'persistent'. note that you need to rotate the letter matrix such that the $ is at the exit coordinates [5,5] used in his solution. Thus landalan.org/terminate/persistent.html Ref : forums.unfiction.com/forums/viewtopic.php?p=263019#263019 Clue 4.2 : the log_updates page had at that time hidden the text : ********** Please help me get out They will destroy the internet As it is today ********** For reference the complete text was : ********** Welcome operative, you are now receiving updates <<Please help me get out>> Mulai-Hassan doesn't know what's going on. The pirates have scared him and he is pulling his collective will together at the moment. I don't think we have anything to fear from him presently. <<They will destroy the internet>> Mulai-Hassan still feels entitled to Tunis' sewers. Recall that Mulai must accept our suzerainty before they will receive results. In the mean time, provide him with dummy data collected from the puppeteers. They'll be wanting the information about the direction of flow in the sewers. <<As it is today>> Next update: 1155020400 ********** wich translated to Next update : Tuesday, August 8th 2006, 7:00:00 (GMT) Clue 4.3 : in the colors page using photoshop or The Gimp, use a medicine dropper tool on the small dots in the background. Use the hex value of each color, concatenate them, and you'll get a message... a riddle: ********** I see the whole world, a boy and a girl, Gender is no barrier to me. Vega at ten, a castle, a den, And back home just in time for some tea. What am I? ********** An update on August 8 stated : use your imagination landalan.org/project/imagination.html Clue 5 : On August 8 as announced the log_updates page was updated with an obvious link : landalan.org/sewer/Mulai-Hassan.html also the text stated : ********** I got caught in their plot before I realized what was happening. Next Update : 1155625200 ********** wich translates to : Tuesday, August 15th 2006, 7:00:00 (GMT) Clue 5.1 : In Mulai-Hassan page the poem is : Revelation by Robert Frost thus : landalan.org/sewer/revelation.html also the hidden text states : ********** If you can help me, contact me Through an industry insider contact... ********** Clue 5.2 : On the revelation page , the binary: 010 000 010 110 101 111 101 000 111 110 translates to 2 0 2 6 5 7 5 0 7 6 using those pairs on the persistent page gives: ROUTE the next page : landalan.org/terminate/route.html Clue 6 : The route page is encoded using vigenere , keyword is blizzard , text is : ********** We have reason to believe that John Q at httpwwwtheinsidegamercom is a Blizzard employee who has stumbled upon something Our contacts at Blizzard have assured us that nothing has been compromised but we are wary of their assurances The things that they have told us in the past have not always been entirely truthful You must figure out whether or not that which they told us was accurate Please investigate and report back any irregularities to me Please investigate httpwwwtheinsidegamercom Blizzard employee possible leak priority target. ********** New Website : theinsidegamer.com --Last edited by manar on 2006-09-01 08:36:42 -- | |||
| |
| manar Posts : 721 Hacking Microsoft.com |
Clue 11.1 : On August 22 the phone message changed it says now : ********** We have been watching and we will have an assignment for you soon. We will direct you where to go when the time comes. There are only a few more tests you must pass. And your background must be cleared. We will be in contact. ********** and then it includes phone tones at the end of the message . The tones correspond to : 377456696915466965 . Arranging the tones we get 3 strings 3774566#6642766#68 wich translate to : "epsilon omicron nu" according to phonespell.org , entering EON in technologic.html ( clue 9.2 ) we get new page : landalan.org/tests/Valentine.html Clue 11.2 : The original pic of the valentine page is found here : mccullagh.org/photo/1ds-4/cathedral-of-st-vincent-de-paul , it is the Cathedral of St Vincent de Paul, in Tunis, Tunisia. Using "Tunis" and "cathedral of st. vincent de paul" leads to : landalan.org/tests/auth.html Clue 11.3 : Meanwhile , new log_updates update on August 22 : ********** Welcome operative, you are now receiving updates Keep your phone close, and your recordings closer. Next update: 1156834800 ********** Which decodes to 08/29/2006 7:00am GMT Clue 12 : the valentine page asks for culture.php before redirecting to auth page at the time we found this , looking in the culture.php source you get : // userName( -- third -- ); // passWord( -- w7ERvVx2 --); the password part is different everytime you hit that page. hitting the page repeatedly and looking at the third letter only, only the letters P E R Z H Y appeared. which led to: username: third, password: zephyr next page: landalan.org/tests/geometry.html Clue 12.1 : The circle in geometry page is a decoder ring. The numbers are relative to pi. Start with the top as A, like in the picture, and letter clockwise around the circle putting a letter every 1/26th of the way around. 1.570 1.692 2.295 2.295 1.692 1.692 2.175 0.846 0.000 0.121 0.121 2.900 0.846 0.483 0.000 0.362 2.295 1.692 0.725 0.000 1.329 0.000 2.779 2.900 0.846 2.295 1.450 1.329 The numbers correspond to the angle in radians where the specific letter is found. The whole list reads: "NOT TOO SHABBY HEAD TO GALAXY HTML" ... So go : landalan.org/tests/galaxy.html Clue 12.2 : The original galaxy pic is here : starryskies.com/solar_system/planets.gif All the zodiac signs but neptune are ok , the image is stegged with the password "neptune". destegging gives "You are almost through your tests. Please procede to hyper.html" Next page : landalan.org/tests/hyper.html Clue 13.1 : in hyper page the image reads "tesserac" in different fonts , the list is : t - britannic bold E - Edwardian scrïpt S - ??? S - freestyle scrïpt E - Showcard gothic R - Tempus Sans A - Edwardian scrïpt C - wingdings From that beefstew was guessed so next destination : landalan.org/tests/beefstew.html Clue 13.2 : On August 22 , when discovered beefstew was titled "He burns his food..." and it had text : ********** UQPBM FHBLG OMVEN SHNXY JRQHT HGBBD CSRHO WETIH SOIFP FLWAS UUYWN WXWXG CKZZP FXR ********** after some tries and since we had no luck with it the title changed to "He berns his food..." on 08/25 ... wich led to code being encoded using a Hebern rotor machine (he burns, he berns... get it?) with the key being "hisfood" , it decrypts to : "good work visit this page between six pm gmt and six thirty pm gmt for your next test" Clue 13.3 : Every day between 18h00 and 18h30 gmt the beefstew page updated with hebern encoded text , the first we could catch was : ********** <!-- JFWPJ SMGDB PJDLD LZDFF AXXLW UMHOA ZWQUQ UNAHZ PKOGR JPEMJ REOP --> ********** wich translates to with key 'heberns' to : "good you made it here on time head to garbled php for your last test" other than landalan.org/tests/garbled.php we had time.php , thenextpage.php , left.php , those pages were only accessible from 18h00 to 18h30 gmt and showed a counter that should stop on September 1, 00:00 GMT . Clue 13.4 : On 08/29 log_updates was updated again : ********** Welcome operative, you are now receiving updates You have completed the tests. Next update: -- ********** It seems we've done everything well , now to wait for September 1 Clue 14 : Meanwhile in TIG , theinsidegamer.com/2006/08/my_lifes_a_mess_now.html , poor John converstaions we had with him ; Original : ********** I hooked up recently with the group trying to help you out with the Land---- situation (just being careful, paranoia never hurts) and just saw your latest blog post. Man, that hurts. My heart goes out to you. Has there been any contact with your 'inside friend' lately? Anything happening you don't feel comfortable putting out in public? We're here for you! - XS ********** Reply : ********** XS, The paranoia is definitely warranted. I have asked Jon a few things, and gotten back the information. I don't trust it to the internet though. I will have to leave it at a drop somewhere in Portland for your group to pick up. I'll contact you and others in your group when I have that set up. As for other things happening... well, the thing with my sister is really disturbing. I was telling them about this odd organization and such, explaining why I got fired, but it wasn't until I said Jon's name that they told me they didn't want to hear anything else. At first I thought... but no, that would just be too coincidental... ... You see... the man my sister, Emily, married... his name is William Russel... That can't be it though, could it? ********** Another reply : ********** Weyrlady, Yes, I do have some more information, some of it disturbing. But I'll have to leave it at a drop. It's too sensetive for digital transmission. I'll give you or someone in your group the heads up at least a few days before the drop, but it will happen before Labor Day. As far as I can tell though, you have to get further on the inside than I can to really crack this. I'll have to leave that to you guys, and just talk to Jon. I'll be in contact, but I don't have regular internet access, so I'll have to get back to everyone who contacts me all at once. JohnQ ********** Clue 15: On August 30 beefstew was updated with code : "Bra lvcw bi wqdudp qkdf tv.jov" wich translates to : "The time is almost upon us.php" . link : landalan.org/tests/us.php the new counter page was a permanent one counting down to the 1st September , the background changed to black and the letters to red 5 minutes before the the time went out , at 00:00h gmt the counter stopped , after refreshing we had this message : ********** You have done well. The plans are now in motion. Please Procede: Landa Systems ********** Link : landa-systems.com/ Woooo . We are now almost part of Landalan ... next post will be on how to register as a landalan operative .. --Last edited by manar on 2006-09-01 11:52:08 -- | |||
| |
| TheIsland admin Posts : 2012 Pissing on LTV ![]() |
just postin here to confirm to Manar that i read this and that he shouldnt hack my myspace now ![]() |
| manar Posts : 721 Hacking Microsoft.com |
LOL ... it's ok TI , it's ok ! ![]() See how it is done guys and gals ? ![]() Ok back to topic : During the first part of this game we were tested (by someone) for our abilities regerading investigation , and we had to demonstrate our grasp of logic , after a month of tests we have been retained as valid candidates and were told to head to : http://www.landa-systems.com/ But the tests are not over , you need to register as an operative for landa systems and therefore you need to find your path to it . Well folks we are still at our first mission for landa , so I'm not going to post spoilers yet , hey this is not a monoposter thread , lol , so get your hands on work and try to solve this first one , all I can say is : it is dynamic --Last edited by manar on 2006-09-02 10:44:37 -- | |||
| |
| manar Posts : 721 Hacking Microsoft.com |
Btw , I've got an email from John Q of theinsidegamer.com yesterday , the object was "The Drop" and here goes the content :
since no one was available in the portland area on saturday an email was sent asking to postpone this until sunday , and reply :
So if anyone is in the portland area ... ![]() | |||||
| |
| manar Posts : 721 Hacking Microsoft.com |
Update on the drop in the portland area : enaxor from the unfiction forums found the enveloppe behind the Willian Ladd plaque in the Ladd Circle , here is a transcrïpt :
and the links to the scanned sheets : http://bogossa.free.fr/ARG/Landalan%20ARG/letters/09032006/LambdaDrop-p1.jpg http://bogossa.free.fr/ARG/Landalan%20ARG/letters/09032006/LambdaDrop-p2.jpg http://bogossa.free.fr/ARG/Landalan%20ARG/letters/09032006/LambdaDrop-p3.jpg The transcrïpt of the blacked out text :
and the link to the raw scan : http://bogossa.free.fr/ARG/Landalan%20ARG/letters/09032006/00049p05.jpg | |||||
| |
| manar Posts : 721 Hacking Microsoft.com |
Ok here goes the solution to register as a landa operative : The main page is just 2 entry fields with the symbol lambda in between , looking at the source code we get :
Looking more thoroughly through the code we see this site uses javascrïpt for loging , the important file is landa-systems.com/js.js , there you get how the login is done , that is through the page landa-systems.com/search.php , going there you get (if you use no arguments ) this xml : <?xml version="1.0" encoding="ISO-8859-1" ?> - <info> <ucl>0</ucl> <ulc>0</ulc> <pcl>0</pcl> <plc>0</plc> </info> always from js.js we can see we should use this form : landa-systems.com/search.php?u="+user+"&p="+pass+"&sid="+Math.random() when the user/pass combination is correct we should get in . so let's try random users and passes like : landa-systems.com/search.php?u=xxxxxxxxxx&p=xxxxxxx great we now have this xml : <?xml version="1.0" encoding="ISO-8859-1" ?> - <info> <ucl>1</ucl> <ulc>0</ulc> <pcl>0</pcl> <plc>0</plc> </info> looks like the right path :-) let's try now this : landa-systems.com/search.php?u=apxxxxxxxx&p=xxxxxxx - <info> <ucl>1</ucl> <ulc>2</ulc> <pcl>0</pcl> <plc>0</plc> </info> to make it short : ucl stands for : Username Character Length , when the length is correct it is set to 1 . ulc stands for : Username Letters Correct , when you have all correct characters you should have 10 since that's the ucl ;-) The username is : apprentice . The same goes for the password , pcl = Password Character Length and plc = Password Letters Correct ... BUT the problem here is the password dynamicaly changes every 3 minutes , a perpetual puzzle indeed :-) Anyway if you're too lazy , here goes the link you're redirected to , to register as an operative : landa-systems.com/site/index2.php Try to register with emails other than gmail or yahoo , it's better , otherwise register fast ... we are still on our first mission , so join the fun ! --Last edited by manar on 2006-09-04 05:38:25 -- | ||||
| |
| Borky Posts : 4864 No nudity, no care. ![]() |
zimbabwe |
|
| ![]() | ![]() |
Get a free forum!
AceBoard Free Forum v 5.3
Download Premium Web Templates!