Skip to content

Instantly share code, notes, and snippets.

@jordanbyron
Last active January 2, 2016 11:59
Show Gist options
  • Save jordanbyron/8300152 to your computer and use it in GitHub Desktop.
Save jordanbyron/8300152 to your computer and use it in GitHub Desktop.
Notes for the ARG at whoisstraka.com

whoisstraka.com

Possible ARG based on the book S. by Dorst / Abrams. The following are my initial notes based on the site and its contents.

HTML Comments

Please direct all correspondence to [email protected]
using secure communications protocols and encryption     
to avoid detection and unwanted surveillance. Unsigned   
messages with no PGP key will have to be ignored. They   
are watching and it is raining.                          
. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
UTrzg2s/k3NAeLeAgiNBpeJeA+8u07vicl  .   .       .     .  
+qxHE5nOqCBa9FQWdbG3TODGqtqXsX2/+x    .     . .   .     .
GMLEaHNSgJBACj/iAYUns73fI6vVk00UBJ    . . .   .     .    
yi1WwXHKy9LvxO9OONzvo0EjCP          .     . . .   .   . .

Just Code

UTrzg2s/k3NAeLeAgiNBpeJeA+8u07vicl
+qxHE5nOqCBa9FQWdbG3TODGqtqXsX2/+x
GMLEaHNSgJBACj/iAYUns73fI6vVk00UBJ
yi1WwXHKy9LvxO9OONzvo0EjCP

Attempted to decode using AES 128 / 256 bit and BlockTEA

Attempted keys:

  • NGGBCEBIRLEBIRLBHEARBHEAREQVAREQVAR0000000000 Number station code (see below)
  • 6483 KHZ
  • rowanmeetatastatemaninne

Just Dots

.   .       .     .
  .     . .   .     .
  . . .   .     .
.     . . .   .   . .

Possible grille cypher?

Condensed dot pattern (Empty columns removed)

. .   .  . 
 .  .. .  .
 ... .  .  
.  ... . ..

Morse code of condensed dot pattern (Spaces == Dashes)

.-.---.--.-
-.--..-.--.
-...-.--.--
.--...-.-..

Morse code broken down by letter

 r   o   w   a n  m  e e t  a t a   s  t a  t e m  a  n  i  n  n  e
.-. --- .-- .- -. -- . . - .- - .- ... - .- - . -- .- -. .. -. -. .

row an meet at a state man inne

Row / Column dot count

 2 2 2 2 2 3 1 2 1 2 2
4.   .       .     .  
5  .     . .   .     .
5  . . .   .     .    
7.     . . .   .   . .

Coordinates

35° 46.865', -5° 48.797'

French Consulate, Tanger, Morocco

Google Map of coordinates

Reddit post asking for help from anyone in Tanger to look for phyiscal clues CF Cicada 3301 posters

Animated Gif

Individual frames from gif: http://imgur.com/a/H7R1N

Image text / description (Display time in milliseconds)

S (4000)
Rorschach 1 (50)
S (2000)
6483 KHZ (1000)
S (1500)
Rorschach 2 (100)
S (2000)
[S]AFETY IN NUMBERS WONT KEEP YOU DRY (400)
S (1500)
Rorschach 3 (50)
S (2000)
SEEK SHELTER FROM THE [S]TORM (400)
S (1200)
Rorschach 4 (50)
S (3000)

GIF was created with Adobe Photoshop CS6 (Machintosh)

Total Duration: 147.05 s

Rorschach Images

Dots under the S in "Safety" and "Storm". Possible code AET?

F characters are slighly below the baseline and M characters are slightly above Source

6483 KHZ

Numbers Station on 6483 KHZ

Youtube video


NGGBC
EBIRL
EBIRL

BHEAR
BHEAR

EQVAR
EQVAR

00000
00000

NOTE: These numbers are probably unrelated but documented here for completeness.

Could not match up the number groups to any values on the Eotvos wheel.

Ivan Lebedevsky Radio Logs

After the first report of an unid Russian coastal station UHX (a Russian vessel was spotted to send traffic in CW to UHX on 2420 kHz, mentioning "ASTRAKHAN" in the addressee field) UHX itself was logged on 6483 kHz in CW, this time it IDed as UHX5. In the Russian language bulletin (nav/warn ?) which was send it mentioned the "Old River of Terek in Kizlya (a city in Northern Dagestan) area in the Republic of Dagestan (a Russian Republic). This location and Astrakhan are at or near the Caspian Sea, so it could be a new Russian coastal station serving the Caspian Sea. Maybe a station for a river and/or Caspian Sea fleet... ??? Prob. "a new" Astrakhan Radio ?

Source

Themes

Storms (Rain, Being Wet)

  • SAFETY IN NUMBERS WONT KEEP YOU DRY
  • SEEK SHELTER FROM THE STORM
  • They are watching and it is raining.

Clues to decrypting the text in the source?

Rorschach Inkblots

Random noise or significant? This seems to be the only reference so they might be a distraction.

PGP Key

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG/MacGPG2 v2.0.20 (Darwin)
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=DDQ1
-----END PGP PUBLIC KEY BLOCK-----

Generated on a Macintosh

Miscellaneous Notes

Both radiostraka.com and whoisstraka.com were registered with TUCOWS, INC while soonyouwillknow.com and eotvoswheel.com were both registered with Go Daddy

whoisstraka.com appears to be hosted on a shared VPS 216.70.70.102 using nginx/1.4.3

References


@jurmol
Copy link

jurmol commented Oct 17, 2014

Good work on transforming the dots to morse code, it looks plausible. I was thinking braille, but couldn't make it work with four rows...
Anyway, Im guessing at this spacing: "rowan meet at a state man in ne" - NE could be New England. But who's Rowan and who's the state man?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment