McDonald's Monopoly Hash?

[DannyHamilton]

So, I see that each McDonald's Monopoly piece is printed with an 11 character code that can be used at the playatmcd.com website for additional chances to win a prize.

I'm not certain which characters are used in the code. However, after seeing 198 characters (18 codes), so far I've seen all except 0, A, C, E, F, I, O, P, S, U, and Y.  It won't surprise me if they don't use 0 (zero), O (oh), and S (ess) to avoid confusion with similar characters, although since I've already seen 5 (five), L (elle), and 1 (one), they may not have left out any characters at all. My best guess is that they are using base 25 and that the characters I haven't seen yet are not used at all.

Assuming that only 25 characters are used and that all possible combinations are valid (They aren't, I've already tried some random combinations), there are a maximum of 2.38*10¹⁵ possible codes (25¹¹) which fits easily into a 64 bit integer.

I can't help but wonder:

• What sort of checksum is used in the code to ensure its validity?
• What sort of hashing algorithm is used to generate these codes?
• How many valid codes actually exist
• Is there is a way to automate the redeeming of these codes on the website?
• How many of these codes per day could a GPU mining rig generate/redeem?

Since the contest runs for 40 days (approximately 3,456,000 seconds), you would have to submit 689,868,574 codes per second if all 2.38*10¹⁵ possible codes were valid.

[DannyHamilton]

While I still can't help but wonder what hashing and checksum system McDonald's is using, I've discovered that it won't be possible to write a program to try all the possibilities.  The McDonalds playatmcd.com website limits each logged in user to 10 codes per day.  You'd have to create almost 6 trillion login IDs to their site to submit enough codes per day to try them all.

[caffeinewriter]

While I still can't help but wonder what hashing and checksum system McDonald's is using, I've discovered that it won't be possible to write a program to try all the possibilities.  The McDonalds playatmcd.com website limits each logged in user to 10 codes per day.  You'd have to create almost 6 trillion login IDs to their site to submit enough codes per day to try them all.

McCoin Miner.

[goodlord666]

Are you trying to get some Happy Meals for free?

[DannyHamilton]

Are you trying to get some Happy Meals for free?

Nah. They are giving away ten "2013 FIAT® 500 Sport Hatchback" vehicles, twenty prizes of $500, and six hundred prizes of $50.

Really though, I'm more interested in the math and brute force possibilities than any of the prizes.

[Phinnaeus Gage]

Are you trying to get some Happy Meals for free?

Are you trying to get some Happy Meals for free?

Nah. They are giving away ten "2013 FIAT® 500 Sport Hatchback" vehicles, twenty prizes of $500, and six hundred prizes of $50.

Really though, I'm more interested in the math and brute force possibilities than any of the prizes.

You guys were so close, but please leave the humor for the professionals.


From Ronny at Hashbrown Labs Inc.

[kibblesnbits]

Are you trying to get some Happy Meals for free?

Are you trying to get some Happy Meals for free?

Nah. They are giving away ten "2013 FIAT® 500 Sport Hatchback" vehicles, twenty prizes of $500, and six hundred prizes of $50.

Really though, I'm more interested in the math and brute force possibilities than any of the prizes.

You guys were so close, but please leave the humor for the professionals.


From Ronny at Hashbrown Labs Inc.

Those things go great with a Merkle Root Beer.
wakka wakka

[goodlord666]

Are you trying to get some Happy Meals for free?

Are you trying to get some Happy Meals for free?

Nah. They are giving away ten "2013 FIAT® 500 Sport Hatchback" vehicles, twenty prizes of $500, and six hundred prizes of $50.

Really though, I'm more interested in the math and brute force possibilities than any of the prizes.

Well if you hadn't posted this publicly on an fbi infested forum you might have had a chance of getting some of it.

(I should also get paid for monitoring this forum 24/7)

[DannyHamilton]

. . . You'd have to create almost 6 trillion login IDs to their site to submit enough codes per day to try them all.

. . . .Really though, I'm more interested in the math and brute force possibilities than any of the prizes.

Well if you hadn't posted this publicly on an fbi infested forum you might have had a chance of getting some of it.

A chance of getting some math and brute force possibilities?  The FBI has something against math?  I'm not aware of any laws against mathematics.

[JoelKatz]

I can't tell you what method McDonald's actually uses, but they could simply be truly random. McDonald's has to "cross off" each code as it's used to stop the same code from being used more than once. So there's really no reason not to just put each code in a database since you pretty much have to do that anyway.

[SgtSpike]

Have you tried generating some base25 hashes and entering them?

[legolouman]

Are you trying to get some Happy Meals for free?

Are you trying to get some Happy Meals for free?

Nah. They are giving away ten "2013 FIAT® 500 Sport Hatchback" vehicles, twenty prizes of $500, and six hundred prizes of $50.

Really though, I'm more interested in the math and brute force possibilities than any of the prizes.

You guys were so close, but please leave the humor for the professionals.


From Ronny at Hashbrown Labs Inc.

I'm willing to invest into your new BigMacHasher line.

[PinkBatman]

I'd love to see some maths about this.

[goodlord666]

Bruteforce me a Fiat hatchback!

[b!z]

While I still can't help but wonder what hashing and checksum system McDonald's is using, I've discovered that it won't be possible to write a program to try all the possibilities.  The McDonalds playatmcd.com website limits each logged in user to 10 codes per day.  You'd have to create almost 6 trillion login IDs to their site to submit enough codes per day to try them all.

Proxies + multithreaded cracking = potential success

[legolouman]

While I still can't help but wonder what hashing and checksum system McDonald's is using, I've discovered that it won't be possible to write a program to try all the possibilities.  The McDonalds playatmcd.com website limits each logged in user to 10 codes per day.  You'd have to create almost 6 trillion login IDs to their site to submit enough codes per day to try them all.

Proxies + multithreaded cracking = potential success

You still have to make the account, and most likely authenticate them with an email.

[Kontakt]

They'd probably also get suspicious when 15 million accounts were created from somewhere in russia within 5 hours.

[Isokivi]

Anyone working on a happymeal-miner yet ?