Bitcoin Forum
May 04, 2024, 03:40:08 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Can you crack it?  (Read 2746 times)
MoonShadow (OP)
Legendary
*
Offline Offline

Activity: 1708
Merit: 1007



View Profile
December 02, 2011, 09:31:05 PM
 #1

http://canyoucrackit.co.uk/

A novel way for a cybersecurity company to find qualified applicants.  If you live in the UK, and need a job, give it a go.

"The powers of financial capitalism had another far-reaching aim, nothing less than to create a world system of financial control in private hands able to dominate the political system of each country and the economy of the world as a whole. This system was to be controlled in a feudalist fashion by the central banks of the world acting in concert, by secret agreements arrived at in frequent meetings and conferences. The apex of the systems was to be the Bank for International Settlements in Basel, Switzerland, a private bank owned and controlled by the world's central banks which were themselves private corporations. Each central bank...sought to dominate its government by its ability to control Treasury loans, to manipulate foreign exchanges, to influence the level of economic activity in the country, and to influence cooperative politicians by subsequent economic rewards in the business world."

- Carroll Quigley, CFR member, mentor to Bill Clinton, from 'Tragedy And Hope'
1714794008
Hero Member
*
Offline Offline

Posts: 1714794008

View Profile Personal Message (Offline)

Ignore
1714794008
Reply with quote  #2

1714794008
Report to moderator
1714794008
Hero Member
*
Offline Offline

Posts: 1714794008

View Profile Personal Message (Offline)

Ignore
1714794008
Reply with quote  #2

1714794008
Report to moderator
1714794008
Hero Member
*
Offline Offline

Posts: 1714794008

View Profile Personal Message (Offline)

Ignore
1714794008
Reply with quote  #2

1714794008
Report to moderator
"Governments are good at cutting off the heads of a centrally controlled networks like Napster, but pure P2P networks like Gnutella and Tor seem to be holding their own." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714794008
Hero Member
*
Offline Offline

Posts: 1714794008

View Profile Personal Message (Offline)

Ignore
1714794008
Reply with quote  #2

1714794008
Report to moderator
1714794008
Hero Member
*
Offline Offline

Posts: 1714794008

View Profile Personal Message (Offline)

Ignore
1714794008
Reply with quote  #2

1714794008
Report to moderator
1714794008
Hero Member
*
Offline Offline

Posts: 1714794008

View Profile Personal Message (Offline)

Ignore
1714794008
Reply with quote  #2

1714794008
Report to moderator
Eveofwar
Sr. Member
****
Offline Offline

Activity: 406
Merit: 250


View Profile
December 02, 2011, 09:42:18 PM
 #2

CyberSecurity company ?

I think you mean GCHQ...the intelligence service of the government of the United Kingdom.

http://www.gchq.gov.uk/AboutUs/Pages/index.aspx

=]
Raoul Duke
aka psy
Legendary
*
Offline Offline

Activity: 1358
Merit: 1002



View Profile
December 02, 2011, 09:51:56 PM
 #3

CyberSecurity company ?

I think you mean GCHQ...the intelligence service of the government of the United Kingdom.

http://www.gchq.gov.uk/AboutUs/Pages/index.aspx

=]

I don't know how you reached that conclusion but the domain was registered by an advertising company called TMP (UK) Limited http://investing.businessweek.com/research/stocks/private/snapshot.asp?privcapId=5532895
Eveofwar
Sr. Member
****
Offline Offline

Activity: 406
Merit: 250


View Profile
December 02, 2011, 09:55:19 PM
 #4

CyberSecurity company ?

I think you mean GCHQ...the intelligence service of the government of the United Kingdom.

http://www.gchq.gov.uk/AboutUs/Pages/index.aspx

=]

I don't know how you reached that conclusion but the domain was registered by an advertising company called TPM (UK) Limited http://investing.businessweek.com/research/stocks/private/snapshot.asp?privcapId=5532895

Google.

http://abcnews.go.com/blogs/technology/2011/12/can-you-crack-it-uk-agencys-website-seeks-new-spies/

"Britain’s GCHQ (short for Government Communications Headquarters; it’s been around since 1918) says it usually recruits bright young people right out of university, but in the digital age, it says, there may be a lot of bright young hackers out there who are worth talking to."
Raoul Duke
aka psy
Legendary
*
Offline Offline

Activity: 1358
Merit: 1002



View Profile
December 02, 2011, 10:01:15 PM
 #5

CyberSecurity company ?

I think you mean GCHQ...the intelligence service of the government of the United Kingdom.

http://www.gchq.gov.uk/AboutUs/Pages/index.aspx

=]

I don't know how you reached that conclusion but the domain was registered by an advertising company called TPM (UK) Limited http://investing.businessweek.com/research/stocks/private/snapshot.asp?privcapId=5532895

Google.

http://abcnews.go.com/blogs/technology/2011/12/can-you-crack-it-uk-agencys-website-seeks-new-spies/

"Britain’s GCHQ (short for Government Communications Headquarters; it’s been around since 1918) says it usually recruits bright young people right out of university, but in the digital age, it says, there may be a lot of bright young hackers out there who are worth talking to."

Thanks.
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
December 02, 2011, 10:02:52 PM
 #6

I got as far as determining that this was a block of executable code.  Poking at it, I decided this, because it contains lots of patterns that start with the same byte, that are two- and three- bytes long, very much like what you'd expect to see in an executable binary.  (I have written assembly code in the past, perhaps this is the programmer audience they are targeting)

I started googling, and found comments consistent with that interpretation.  I didn't bother to go past trying to execute the code, but I notice somebody had written a C program that poked the bytes into memory and then called them as though it were a function, and then scraped whatever it left behind in the memory.  The program seemed to suggest that this is x86 code (must be run in a 32-bit process).

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
naypalm
Legendary
*
Offline Offline

Activity: 1272
Merit: 1012


howdy


View Profile WWW
December 02, 2011, 10:47:08 PM
 #7

Dang this is a short program.

scribe
Sr. Member
****
Offline Offline

Activity: 295
Merit: 250



View Profile WWW
December 02, 2011, 11:36:50 PM
 #8

I got as far as determining that this was a block of executable code.  Poking at it, I decided this, because it contains lots of patterns that start with the same byte, that are two- and three- bytes long, very much like what you'd expect to see in an executable binary.  (I have written assembly code in the past, perhaps this is the programmer audience they are targeting)

I started googling, and found comments consistent with that interpretation.  I didn't bother to go past trying to execute the code, but I notice somebody had written a C program that poked the bytes into memory and then called them as though it were a function, and then scraped whatever it left behind in the memory.  The program seemed to suggest that this is x86 code (must be run in a 32-bit process).

Been looking at this today. There are too many patterns between the left and right halves to be coincidence, IMHO.

Interesting challenge, anyway. Better than the usual "solve some boring transposition" challenges.

blocknois.es Bitcoin music label. ~ New release: This Is Art

Read: Bitcoin Life | Wear: FUTUREECONOMY
Phinnaeus Gage
Legendary
*
Offline Offline

Activity: 1918
Merit: 1570


Bitcoin: An Idea Worth Spending


View Profile WWW
December 03, 2011, 04:32:36 AM
 #9

http://canyoucrackit.co.uk/

A novel way for a cybersecurity company to find qualified applicants.  If you live in the UK, and need a job, give it a go.

I clicked the linked and stared at it for about a minute and believe that I would try the HTML Hexadecimal Color approach. I did not Google anything, so I don't have a clue if others are approaching it from that angle.
Vanderbleek
Sr. Member
****
Offline Offline

Activity: 518
Merit: 250



View Profile
December 03, 2011, 06:32:37 AM
 #10

Almost wonder if the correct answer is "brute force it." Don't see any captchas, might be worth trying a dictionary attack.
naypalm
Legendary
*
Offline Offline

Activity: 1272
Merit: 1012


howdy


View Profile WWW
December 03, 2011, 09:36:35 AM
 #11

Gosh golly, This code is hard!

Phinnaeus Gage
Legendary
*
Offline Offline

Activity: 1918
Merit: 1570


Bitcoin: An Idea Worth Spending


View Profile WWW
December 03, 2011, 04:30:07 PM
 #12

Is my HTML Hexadecimal Color approach a dead end? I think I have the hexadecimal part right. I though of this when I saw 00 00 00 and FF FF FF, and it seemed black and white to me.
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
December 03, 2011, 05:28:47 PM
 #13

It's not colors. It is definitely x86 code.

I ran it. It is incomplete. There is a second half apparently buried in the metadata of the image, according to a posting I found. I wonder if I would have come to the "there's more to this, somethings missing" conclusion had I disassembled and analyzed it in detail.

When you run the code it gives you a URL

At the URL is a second problem to solve. The second problem is you must implement a simplistic virtual machine according to a spec they made up, and then run a program written for it. I did not bother, but am certain it is something I could do.

I used Google for help along the way, but was able to independently determine that the bytes were likely to be executable code without any help, just by staring at them and looking at the patterns. I feel I could implement the VM as well - sounds like a typical comp sci homework assignment - I just don't feel it's worth the time.

They say they want code crackers.  Working with assembly language isn't a skill I would associate with cracking codes. It would make more sense if they were after programmers for doing device drivers or embedded programming. Unless they mean "cracking" in the "removing copy protection" sense, this is also assembly intensive.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
Vanderbleek
Sr. Member
****
Offline Offline

Activity: 518
Merit: 250



View Profile
December 03, 2011, 05:55:21 PM
 #14

I figured the image itself had something to do with it -- I also pulled apart the HTML just to see if there was something in that. Anyway, kind of a cool hiring process.
Phinnaeus Gage
Legendary
*
Offline Offline

Activity: 1918
Merit: 1570


Bitcoin: An Idea Worth Spending


View Profile WWW
December 03, 2011, 08:16:43 PM
 #15

I couldn't stand it anymore, so I fired up my old friend--Google--and found this: http://www.theinquirer.net/inquirer/news/2129172/crack-online-code-job-spy
silverchair
Full Member
***
Offline Offline

Activity: 168
Merit: 100



View Profile WWW
December 12, 2011, 07:14:41 AM
 #16

Try to refer this thing to a Cracker.
 Wink

Hey Guys! WWW.FREEBITCOINS.ORG introduces "Epic December Contest" where you can Win Sweet Casascius Coins !!!
BurtW
Legendary
*
Offline Offline

Activity: 2646
Merit: 1131

All paid signature campaigns should be banned.


View Profile WWW
December 12, 2011, 07:25:46 AM
 #17

"Solution" here:  http://www.canyoucrackit.co.uk/soyoudidit.asp

Our family was terrorized by Homeland Security.  Read all about it here:  http://www.jmwagner.com/ and http://www.burtw.com/  Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
tiberiandusk
Hero Member
*****
Offline Offline

Activity: 575
Merit: 500


The North Remembers


View Profile WWW
December 12, 2011, 09:55:55 AM
 #18

The password is Swordfish. It is always Swordfish.

Bitcoin Auction House http://www.BitBid.net BTC - 1EwfBVC6BwA6YeqcYZmm3htwykK3MStW6N | LTC - LdBpJJHj4WSAsUqaTbwyJQFiG1tVjo4Uys Don't get Goxed.
Phinnaeus Gage
Legendary
*
Offline Offline

Activity: 1918
Merit: 1570


Bitcoin: An Idea Worth Spending


View Profile WWW
December 12, 2011, 03:46:47 PM
 #19

Quote
So you did it. Well done! Now this is where it gets interesting. Could you use your skills and ingenuity to combat terrorism...

I'll try! I would start by axing the TSA, then use all that money to help combat terrorism.

Then, I would start an open forum that would have everyone in the world offering up their ideas on how to combat terrorism--for free. Have one real smart guy--you're Atlas equivalent--pull out all the good ideas, daily. Now, implement the best ideas. Profit!
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!