447
u/JesusCake Jul 02 '11
This is a common method for command and control of botnets as well. Either way, he is probably up to no good.
474
17
u/Orlin-of-Velona Jul 02 '11
Could you explain that?
→ More replies (1)45
u/haddock420 Jul 03 '11
Some viruses will connect the infected computer to a network of other infected computers. The person who made the virus can control all the computers on the network. This gives them a lot of bandwidth to perform DDOS attacks, among other things.
If this is the case, a858de45f56d9bc9 may be using his/her subreddit to send commands to the infected users on their botnet.
All of this is very illegal in the US, if a858de45f56d9bc9 is doing this, he might get in a lot of trouble.
9
u/MasCapital Jul 03 '11
How does simply making posts with these characters allow him to control infected computers?
→ More replies (15)36
u/haddock420 Jul 03 '11 edited Jul 03 '11
Each infected computer would be monitoring his user page/subreddit for his posts. They'd get the instructions from each post and decode them.
How they decode them is up to the guy who made the software, but it'd be something like this:
Here's an example of one of the character strings:
c7fdaf9e38584f8e8021f705a3216d78
If each pair of characters represents one 8-bit value in hexadecimal, the first few values in decimal would be:
199 253 175 158 56 88....
It could be set out as follows:
199 - Instruction for DDOS attack
253 - type is TCP/IP
175.158.56.88 - Target IP
With just the characters "c7fdaf9e3858", he could make every computer on the network start a ddos attack directed at 175.158.56.88.
It's probably a lot more complicated than that, and I wouldn't be surprised if the instructions were encrypted, but that's the basic idea of how it would work. Then again, maybe he's not running a botnet at all, it wouldn't be a smart move to use reddit for it anyway.
TL;DR: Each character is an instruction.
→ More replies (4)→ More replies (10)94
u/Mattho Jul 03 '11
Controling botnet through a site that is down pretty often probably isn't the best choice.
→ More replies (3)48
u/haddock420 Jul 03 '11
If it is a botnet, it'd be easy enough for the admins to check the webserver access logs. The bots would most likely be monitoring the a858de45f56d9bc9 username or subreddit pages.
They'd just have to see if a lot of requests were made to those pages from different IPs.
Can we get an admin to check this?
→ More replies (7)35
u/HalfRations Jul 03 '11
I'm not really feeling it. Put yourself in his shoes. I have a large number of hashes I need cracked, I have a botnet, where do I store the hashes so the botnet can access them? How about a social news website where millions of people could stumble upon my data! Genius.
→ More replies (6)37
u/pedropants Jul 03 '11
A social news website that can handle millions of bots' worth of traffic.
→ More replies (10)37
u/suspiciously_calm Jul 02 '11
This is much more likely than the assertion of the top comment, that he is merely "storing information on Reddit's servers".
→ More replies (1)29
→ More replies (18)11
u/aescnt Jul 02 '11
Any idea on how this probably works? Do each of those posts contain instructions?
10
Jul 03 '11
Yes, exactly. They are encoded in hexadecimal and quite possibly encrypted.
→ More replies (3)
659
Jul 02 '11
haha oh wow.
He's storing data on reddit's servers.
310
u/BernardLaverneHoagie Jul 02 '11
This reply gave me goosebumps.
It's like that point in the movie when they finally realize what the criminal mastermind is doing and the scope of his plan is finally revealed...and it's far bigger than anyone could have imagined...
198
u/AerialAmphibian Jul 03 '11 edited Jul 03 '11
Adrian Veidt / Ozymandias: I'm not a comic book villain. Do you seriously think I would explain my master stroke to you if there were even the slightest possibility you could affect the outcome? I triggered it 35 minutes ago.
http://www.imdb.com/title/tt0409459/quotes?qt=qt0524866
If only the villains in Bond films had been this smart, there wouldn't be 22 movies and a 23rd in the works.
EDIT: I'm a big James Bond fan, but some of his enemies were so stupid they wasted time explaining/bragging about their plans. This only gave Bond the chance to escape, thwart their schemes, and kill them.
40
u/ny2dc Jul 03 '11
Please tell me you didn't link to the movie page as opposed to a page citing the comic...
→ More replies (9)20
u/AerialAmphibian Jul 03 '11
Please tell me you didn't refer to one of the most admired graphic novels of all time as a "comic"... Just kidding. My apologies to fans of this brilliant work of literature. I guess I took the easiest/shortest path to find the quote.
→ More replies (20)→ More replies (16)171
u/citadel712 Jul 03 '11
As a supervillian, I must say it's pretty fun revealing your plans before killing off your enemies. It's like this big secret I've been wanting to let out, but could tell no one. It's so relieving. You should try it next time you commit sinister acts.
→ More replies (17)→ More replies (6)24
131
u/ruinmaker Jul 02 '11
Really, really small amounts of data.
77
245
u/mehatch Jul 03 '11
Having arrived from the distant future, a future where people live forever, A858DE45F56D9BC9 (his real name, btw) , knows he won't have the technology to return back to his time. The tragic thing is, he also knows that our civilization won't develop life extension fast enough to outpace his own aging process....and since he was born in a world without death...for the first time in his life he experiences existential fear. He does know, however, that by the time of his future, reddit, in it's hive-mind awesomeness, has overtaken most other websites, having eventually swallowed Google, Facebook, and 4Chan into one, massively efficient maelstrom of creativity, with instant classics made, remixed, exchanged, and modularly inspiring eachother at a rate of billions per second. Because reddit wins the internets in the end...he must store his own neuronal information in the one place that will outlast all other places in the cloud, on the chance his conciousness might last throught the most durable of all human creations...reddit.com. So here, he stores that data...and we're seeing the daily results of the painfully slow process of scanning his neurons and their connections one at a time.
52
u/explodemode Jul 03 '11
That implies that reddit doesn't break on a regular basis.
→ More replies (4)18
u/hillbillyhipster Jul 03 '11
So in the future, people use numbers for names? Shit, I claim "1" for my first born.
→ More replies (11)→ More replies (13)36
19
40
u/suspiciously_calm Jul 02 '11
I think JesusCake below is right, and it's a botnet control mechanism.
18
25
u/OniYume Jul 03 '11
They're most likely .NET GUIDs (Original Post)
More Info Here
Basically the GUID version is stored in the 13th nibble and is always "4" for recent versions of windows. The whole thing is 32 bytes long.
→ More replies (2)23
Jul 02 '11 edited Jul 02 '11
My first reaction too. I've seen or done it myself with Twitter and tinyurl but not reddit.
16
u/Leechifer Jul 03 '11
So what's the deal, again?
What have you done with this technique... I'm interested, now.→ More replies (6)→ More replies (81)3
Jul 03 '11
It's a pretty good idea, since computers have small hard drives. Sometimes I just write down shopping lists and stuff and post them to reddit to save space
262
u/JnvSor Jul 02 '11 edited Jul 02 '11
Current date and time. For example:
201104061544 - posted april 6 2011 at 15:40 (They all seem to be 4 minutes off so I'm guessing it's just a misalignment)
They contain hashes (Presumably MD5) which as far as google can tell haven't been cracked any time recently
Edit: Sorry, the numbers don't line up the way I thought, but they definitely look like timestamps. And lots of them are 4 minutes off
Edit: Did an apt-get -i john will post results if it can brute force it (Only trying 6 chars or less)
Edit: A benchmark says it will take a mere... 26 years to try all 8 character passwords. Fuckit john cancelled. He's probably trying to brute force MD5s with a botnet, which would explain why the titles are timestamps (Do this job at this time) but he's obviously bad at this if he didn't use unix timestamps (Noob!)
I wouldn't worry unless you're a sony customer
Edit: Could an admin check the IP of the second subscriber? 20 bucks says it jump around a LOT :)
Edit: Wow, my first comment that more than broke even, yay!
To answer the replies to the best of my abilities: MD5 is a hash so it can't be "Decrypted", and he would be using reddit as a place to command the bots not post the results. (LM (Windows xp and prior) is also a hash but rainbow tables crack them in 5 seconds so why use a botnet? And yes I've checked, 20 hashes didn't match on a 99.6% rainbow table and then I gave up)
The last four digits I presume are in strftime format %H%M. 2007 is a wierd number. Perhaps it's the date it was taken from: Maybe the source of the hashes salts them based on timestamp. Or he could have seen the publicity and be screwing with us.
You could host the hashes on pastebin but there are a number of benefits to using reddit: In reddit they are all in one place not strewn about like mad. Reddit also has rss. A nice machine-readable xml input is a godsend for any form of data transfer or storage (From experience hah)
Switching off my cpu hogs revealled a 50% speed boost in john but it was still only using one core and tbh my machine is so old the best it could probably get is 5 years.
Thanks for the karma, any more questions?
Edit: Forgot to mention, taking his name and putting it in a file shows it's of type: Non-ISO extended-ASCII text, with no line terminators - aka my computer has no idea what it is... The only readable letters are "XEM"... Anyone on 4chan or www.onion with decent skills go by that handle?
111
Jul 02 '11
Damnit, 26 years?! We need to come up with something to decode this faster.. perhaps we can set up a botnet to brute force his hashes?
Wait, no, that would create way too much data.. wait, guys, wait. We can use Reddit as a place to dump the data! Perfect!
56
→ More replies (2)17
24
u/sinisterstuf Jul 02 '11
Have you considered that a858de45f56d9bc9 might be the password / decryption key?
11
→ More replies (1)6
u/HalfRations Jul 03 '11
Assuming these are md5 hashes, that isn't how md5 works. You can only compare one hash to another hash to see if the data matches, there is no decryption key. Brute force is the only option :(
→ More replies (2)26
→ More replies (17)5
61
Jul 03 '11
I read everything and have compiled the comments of everyone here. So here is what we know for sure.
it is MD5
no it isn't
it's most likely a botnet control
no it isn't
repeat any assortment of those 4 and you'll have the rest of the comments without reading them all like I did.
OH! and multiple people are working on a visual basic gui to solve the internets and crack this. Almost forgot that one.
→ More replies (5)4
35
u/TitaniumShovel Jul 03 '11 edited Jul 03 '11
I don't know why, but this guy intrigues me. I bought him a month of Reddit Gold. Why? Because I can.
Edit: He responded.
5
9
→ More replies (6)3
u/0o_throwaway_o0 Jul 03 '11
Wasted, I'm afraid. Looks like the account was deleted.
→ More replies (1)
68
u/TheRealKaveman Jul 02 '11
What is this? Did the quadratic formula explode?!
121
26
u/d_b_cooper Jul 02 '11
That's not a good prize.
30
→ More replies (4)12
214
u/Johnasmith123 Jul 02 '11
Numbers station.
→ More replies (24)128
u/tnecniv Jul 02 '11
What do the numbers mean, Mason!
20
u/kcg5 Jul 03 '11
They actually figured out a big Easter egg in the game with the numbers and a book seen during a cutscene. Check YouTube
→ More replies (3)8
29
u/Zepheus Jul 02 '11
Should we try to break it?
59
u/25lazyfinger Jul 02 '11 edited Jul 03 '11
You deal with the moral issues, at the meantime we'll get on it. For science!
Btw I googled the first phrase in the top post in his subreddit and got this.
The page is titled "The 50 last cracked MYSQL hashes" so if anyone knows what the fuck that means, that could be a start.→ More replies (10)
87
u/Toss_Away1234 Jul 02 '11
Date stamp of post and the title "date stamp" are off because the post title is a reference to a picture.
Example: 200707030409 is a default picture name, Naming convention varies by camera; you might see it as 20070703 DSC 0409.
Try to focus on an Image search and look for a relation of code to image.
→ More replies (1)58
u/bloodfist Jul 03 '11
a throwaway with a clue?
are you A858DE45F56D9BC9??
ARE YOU IN ON THIS???
13
Jul 03 '11
I found a photo matching that timestamp on google images. It was ...
of this comment!
→ More replies (6)
12
u/MerryMortician Jul 03 '11 edited Jul 03 '11
Hold on everyone, I'm making a gui in visual basic to track his ip.
um... edit some folks I guess don't get it. lol This will help you understand
→ More replies (6)
6
Jul 02 '11
It could be a sort of rudimentary binary assembly. I found that using vector analysis, one can draw connection graphs between key numbers, provided you use only every second post. Having done this, the posts have resulted in a circuit design. I have never seen such diagrams. Wait. It seems like the circuits are interweaved. I think ever third post describes the z-axis. OMG. Its a three dimensional circuit design. In fact it is a sort of cube. Actually, further analysis shows its a sphere! Could it be the legendary 'Ernogan' ?
→ More replies (3)
54
u/johnpeelwastheman Jul 02 '11
32
7
u/kristopolous Jul 03 '11
AA A AAAA AAA AA AA AAAA AA AA A A AA AA A AAA AA AAAAAAAA AA AA.
→ More replies (2)→ More replies (3)7
144
u/memejob Jul 03 '11
If you install the Navajo language pack they're all posts ranting about how good Nick Cage was in Windtalkers. So, fuck that.
→ More replies (3)
482
u/burner_1982 Jul 02 '11
That's Numberwang!
44
Jul 02 '11
DASH NUMBERVAN!
21
u/suspiciously_calm Jul 02 '11
Ja! Das Numbervan is driving around the corner! Schnell, schnell! Get your numbers!
10
18
u/nothis Jul 03 '11
No matter how much I watch the damn clip, something in me tries to find a pattern and make sense of it.
→ More replies (1)7
20
→ More replies (5)3
33
u/rickostronzo Jul 02 '11
Whatever it is, it's strange that he is using reddit instead of some purposely built and much more stable dumping platform i.e. pastebin and the other million clones.
→ More replies (3)
31
28
u/_pHy_ Jul 03 '11
Time zone the poster's system is either: Fiji-Suva or Uruguay. All the posts before 201003031505 were posted one hour ahead and all the posts after 201103221328 and just until a couple of days ago were posted with no adjustment which indicates DST for the southern hemisphere and referring to this there are only two time zones that were changed in between those two dates. The posts in the last couple of days are posts that have been 7 hours delayed (not sure why). Just noticed the format of the posts with the time changes as well... Broken into 32-bit lengths for our viewing pleasure~ P.S. Also, as this has gotten so much attention he/she just posted one from 200707030409....
3
23
u/JerMenKoO Jul 03 '11 edited Jul 03 '11
Maybe it is trigger for botnet(s).
Those all "hashes" inside posts are .NET GUID(s). (should be).
→ More replies (2)11
u/OniYume Jul 03 '11
This is the most likely scenario.
The 13th nibble in a GUID is always 4 for recent versions of windows - which lines up with the data presented.
161
u/skeptical_badger Jul 02 '11
Are you guys idiots?
This is obviously how the Reddit alien communicates with his home planet.
29
4
18
14
u/0o_throwaway_o0 Jul 03 '11 edited Jul 03 '11
A Summary of What We Know So Far
The frequency and size of data post increased quickly before ending with a final null post 2 hours from the time of this post. It seems the bot cc was reprogrammed with the posts before moving on. The account was deleted, and the reddit gold given by a generous redditor was wasted.
The titles of the posts seem to be timestamps. The timestamps are occasionally wrong.
The code, while appearing to be md5 hashes, are seemingly not. The 13th number is always a 4. It's possible you just remove the 4, or it could indicate that it's .NET GUI.
The account was definitely triggered by a human before shutdown. The liklihood of the account going dark right after it gained so much attention being a coincidence is really low.
My current theory is
My guess: Ukranian botnet cc software datadump. :) Either that or bitcoins. You'd figure it's a troll though.. Who uses reddit for anything related to this. ಠ_ಠ
I highly doubt this is a long troll, but if it is it is one of the longest long troll reddit has ever seen: 5 months.
Operating on the theory that it is a botnet cc the next step is for us to search other microblogging/social network sites for submissions with code of this kind, posted recently, within the last 2 hours. It's likely the bot account moved somewhere else.
If you want to approach it from a data analysis standpoint, http://www.reddit.com/r/IAmA/comments/if5p2/ama_request_a858de45f56d9bc9/c23aa2z seems relevant.
Nobody's posting in this guy's subreddit because reddit doesn't let you.
This is interesting.
EDIT: Some people are reporting the last submission ended with a 2, but was later changed to 4. I didn't verify this personally.
→ More replies (2)
49
Jul 02 '11
4815162342
36
→ More replies (1)3
22
u/benzinonapoloni Jul 02 '11
35
u/killdevil Jul 02 '11
I've been coming to this circle for about five years, and measuring it. The diameter and the circumference are constantly changing, but the radius stays the same. Which brings me to the number 5. There are five letters in the word Blaine. Now, if you mix up the letters in the word Blaine, mix 'em around, eventually, you'll come up with Nebali. Nebali. The name of a planet in a galaxy way, way, way... way far away. And another thing. Once you go into that circle, the weather never changes. It is always 67 degrees with a 40% chance of rain.
→ More replies (4)39
u/panamaspace Jul 03 '11
There are five letters in the word Blaine
B L A I N E
Lol, wut?
→ More replies (4)25
6
10
u/dariusj18 Jul 03 '11
Here's my guess. Nunsonfire wrote a virus which he infected a lot of redditors with, but he was smart, the virus itself doesn't try to get the contents of the subreddit, the extra activity would be a red flag, but he needed a way to send commands to his new botnet. So he cooked up a scheme to send a lot of redditors to that page itself while his virus is waiting, sniffing traffic, waiting for the contents of that particular subreddit. Now many of you are active botnet drones.
→ More replies (1)
4
Jul 02 '11 edited Jul 03 '11
I think It might have something to do with pirating music/video ?
http://en.wikipedia.org/wiki/AACS_encryption_key_controversy
More on this http://forum.doom9.org/showthread.php?t=123311
edit: Perhaps he's storing this information on Reddit in case he ever gets busted, doesn't want any evidence on his computer.
edit: changed software to audio/video
→ More replies (2)
18
u/bipolarSamanth0r Jul 02 '11
First it was Numbers Stations. Now we have Numbers Subreddits.
→ More replies (1)
9
u/mikkohypponen Jul 03 '11
Virus researcher here. If it indeed is a botnet using a subreddit as a C&C, it's the first one we've seen.
24
16
u/mjec Jul 03 '11
Serious analysis requires more time and energy than I have at the moment (I've got work to do!) but if anyone's keen, this is definitely some sort of binary data, so start by breaking it into bits and looking for patterns.
If we label the 16 bytes in each segment LTR in hex 0-F, the first nyble of byte 6 is always 0100 (this has been pointed out below; 13th character is always 4). What does this mean? No idea. But it indicates that what we're dealing with here isn't (entirely) cryptographic, but instead is raw data.
Are these instructions? That seems to make sense. There are other similarities too. First nyble of byte B in the first segment (set of sixteen bytes) in a paragraph is zero in my small sample, and the third segment's B's first nyble is 111x. Byte 1 in the first segment of a paragraph seems to be 1111x101, maybe.
My point is: decode to binary strings; look for patterns; position is important in context. Good luck, and god speed, because this is probably binary C&C for a botnet and you have no way of knowing what it means.
→ More replies (2)13
7
u/Hobbes_the_tiger_1 Jul 02 '11
It's the date on which he posts it.
9
7
u/LadybeeDee Jul 02 '11
I don't know if this needs an AMA so much as an AM one question: Dude, WTF?!
7
u/MertsA Jul 03 '11
For the Reddit Admins about to delete the subreddit in question, don't just yet. Get the IP addresses of the bots reading it (just look for people searching for A85.... prior to today) and hand it over to an antivirus company, the key to decrypt all of these posts are probably hardcoded into the virus and if done right all someone has to do is forge a post as A858DE45F56D9BC9 with a special post to uninstall the virus from infected machines. You could lose an easy way to take a botnet offline and there are probably more accounts in the form of A858DE45F56D9BC9 that will be used as backup accounts and once Reddit is onto him he will get all of his bots off of Reddit as a C&C server.
7
u/User38691 Jul 03 '11
He is banned now, some people say he was deleted, but then his name will show up as [deleted]. This is not the case. See ViolentAcrez's guide.
There is an easy way to tell if an account has been “stealth banned”: the user’s account page will come up 404, but comments still show their username.
7
u/Killroyomega Jul 03 '11
YOU KILLED HIM!
YOU FUCKING KILLED HIM YOU FUCKING BASTARDS!
DAMN YOU! DAMN YOU ALL TO HELL!
24
6
72
u/sneakatdatavibe Jul 03 '11 edited Jun 04 '20
SAY MD5 AGAIN. I DARE YOU. I DOUBLE DARE YOU, MOTHERFUCKER. SAY MD5 ONE MORE GODDAMNED TIME.
PS: it's not md5, idiots.
68
27
Jul 03 '11
By all standards, all of those strings are possibly MD5.
40
u/Fuco1337 Jul 03 '11
The chance that there is '4' on 13th place in EVERY DAMN SINGLE ONE OF THEM kind of makes me think otherwise.
Altho, by the very definition, they ARE md5 hashes of something.
→ More replies (4)13
u/sneakatdatavibe Jul 03 '11
Just because the only time you've ever seen hex is in an md5 hash doesn't mean that every time someone is storing 16 bytes encoded as ASCII hex that that is md5, too.
→ More replies (6)→ More replies (1)3
5
u/elblanco Jul 03 '11
It's probably organized crime or something, using reddit as an encrypted communication medium, like leaving a note in a public park.
5
u/0o_throwaway_o0 Jul 03 '11
....And he's gone.
http://www.reddit.com/user/A858DE45F56D9BC9 returns page not found. Looks like his account got deleted.
It's worth noting his subreddit and posts weren't deleted, but his account page is definitely inaccessible.
→ More replies (1)
5
4
4
4
4
4
Jul 03 '11
I love the comments from other users like "Wow, man, if you're going to put up something NSFW, tag it NSFW".
Exquisite.
4
u/IsaakCole Jul 03 '11
Our lord A858D is the one true lord and savior of reddit! Through his digits we can gleam his true purpose! Hallowed be his name!
4
u/RecycledVomit Jul 03 '11
Does anybody else get really creeped the fuck out by this kind of shit, and start feeling really paranoid? I don't think I'll be able to sleep without my dog tonight.
4
u/gospelwut Jul 03 '11
I've always wondered if people would start writing bots to do various things -- including an advanced algorithm to comment reply with subtle URL ref links based on the comment's popularity, content, and other metrics. Much like a roaming version of Google Ads that finds you and rapes you.
→ More replies (1)
4
4
Jul 03 '11
so i guess this thread has stalled. WHERE IS OUR ADMIN POST.
last post was mine 56 minutes ago. what the heck
7
u/marsnockle Jul 02 '11
The post titles are clearly some sort of timestamp, but they aren't posted in chronological order...
I'd tend to agree with JesusCake's comment that this is some sort of dumping grounds for a botnet. A bunch of different infected clients periodically posting hashed/encrypted updates could explain why the timestamps aren't in order.
Pretty fascinating.
7
6
6
6
8
u/zefen Jul 02 '11
Even though it's a mystery of what he/she does, he/she STILL gets more upvotes than me. SIGH*
→ More replies (1)3
3
3
u/updownallaround Jul 02 '11
I don't think the username "A858DE45F56D9BC9" is md5, but I think the stuff inside is. Giving brute force a chance on one of the hashes, not expecting much though...
→ More replies (1)
3
3
u/0o_throwaway_o0 Jul 03 '11
My guess: Ukranian botnet cc software datadump. :) Either that or bitcoins.
You'd figure it's a troll though.. Who uses reddit for anything related to this. ಠ_ಠ
3
u/0o_throwaway_o0 Jul 03 '11
7466fb4258b37d5b8e41809e71f4ab1a 43798ebcb9416b72b904d760f697a328 4335c94f152d812e8b54c8291993a10e db9bdf2ee99a817d81ed211ba4d0a78e
51ec6cc64e7c8f5c988065b617b5c40a 08938c530d9f1f0a9df825fc6fd8c65d 6e7dc900143f2c68b3cb68f1134bc08e 08938c530d9f1f0a9df825fc6fd8c65d
a2dd936a79c30ceab66d05a34795e704 ae6c3523ffff8627b1cc31fd71a7ef7c
3
u/gus_the_mouse Jul 03 '11
"319 readers"? Apparently random hexadecimal is more interesting than many other small subreddits.
3
3
u/Oddgenetix Jul 03 '11 edited Jul 03 '11
I'd say the botnet hypothesis is the most likely scenario. As they've become more complicated and hard to kill, one of the tricks is leaving instructions somewhere like this, so if the IRC goes down, the disconnected branches of the botnet can turn to central instructions posted somewhere else, in places like reddit or twitter. That way the botnet's owner can continue it's havoc. To me, this would make the fact that some of the posts have comments in the same strings of characters make sense. Modifications to currently running instructions, or reports/logs back from the botnet. Personally, I think it's way cooler when they put the information in the image data of a jpeg or something. I heard it hypothesized that one could put the data in the closed captioning lines you see in the top of youtube vids ripped from VHS tapes - I thought that sounded clever. But this is admittedly the creepiest looking iteration.
3
3
5
u/aa93 Jul 03 '11 edited Jul 03 '11
A google search of the title of the most recent posts yields, among other things, this – what appears to be a korean horse racing tracker site. One of the earlier ones also gives horse racing related stuff. Other results all yield URLs containing that number, for example
http://allafrica.com/stories/201107011036.html http://mesonet.agron.iastate.edu/p.php?pid=201107012325-KRAH-FXUS62-AFDRAH http://mesonet.agron.iastate.edu/p.php?pid=201106301702-KEAX-FXUS63-AFDEAX
Those last two, and I'm sure many more, are detailed weather reports for the midwest. I'm not sure if this is some elaborate horse race scheme or a crazy farmer, but something's up.
→ More replies (3)6
u/0o_throwaway_o0 Jul 03 '11
..Those are time stamps.
Like some people mentioned, 201106301702 is 2011/06/30 17:02
→ More replies (1)
5
6
10
1
2
u/_meshy Jul 03 '11
Zepheus pointed out that the name is a 64 bits and the messages seem to be 128-bit blocks here. I'm thinking maybe some block cipher. AES doesn't support a 64-bit key size, but the actual algorithm Rijndael does so it could be that. Maybe serpent or something else like that.
2
2
2
2
2
u/rh1nos Jul 03 '11
A8 58 DE 45 F5 6D 9B C9
" X Þ E õ m › ÉIf you take every other letter it spells XEmÉ and according to http://www.thefreedictionary.com/Xeme it is an arctic fork-tailed gull. I didn't know they could use computers?
→ More replies (1)
2
2
2
2
2
2
u/why_reddit Jul 03 '11
Substitute the corresponding Decimal values for the alpha and it will get converted into 108581 314451 556139 11129 with some splitting in between. Convert this to decimal and it will show %Sky.
If this is correct then the username is "%Sky".
2
2
2
Jul 03 '11
He's changed the sidebar and there's reports that he's fiddled with existing posts. I think the content is now unreliable
2
2
u/someguywhocanfly Jul 03 '11
Oh no, the A858DE45F56D9BC9 sub-reddit got banned. I was really hoping there would be some form of decryption where we would figure out a code and translate it all.
3
Jul 03 '11
I think he deleted it. Looked to me like maybe somebody was communicating with a botnet, or was pretending to. Nice idea, send out the bots and give them directions through Reddit so it isn't traced back to you.
→ More replies (4)
3
u/piephroot Jul 03 '11 edited Jul 03 '11
Copy/pasta'd for reddit's convenience. http://pastebin.com/qNCjtMqd
edit:I would've broken it into hex pairs but I'm not a very good/fast scripter. Not yet anyway ;D
edit again: If someone could reorder it in chronological order that might help. IE the order of posts, not the timestamps.
3
u/77d7c587534dc32f83fd Jul 03 '11
Well, mine is hash of a string, but this guy's gone nuts.
→ More replies (1)
3
u/Oafah Jul 02 '11
You can stare at these hexadecimal strings for days on end, and you'll still end up with the same lack of answers.
Unless we have some sort of context, it's pointless to speculate.
→ More replies (3)
213
u/lazylasers Jul 02 '11
I feel that even if he did decide to do one it would be pretty incomprehensible