Everything related to our favorite Scottish duo.
Post a reply

Mon Mar 17, 2014 8:50 pm

there are so many numbers hidden in songs.

for example in Gemini (woman voice in radio noises)
Cold Earth (propably?)
Telepath
Palace Posy
Nothing is Real ("twelve" around first minute)
Transmissiones Ferox ...

Mon Mar 17, 2014 10:46 pm

cfish wrote:
ryanhewitt wrote:edit: another thing, according to Whois, it's due to expire 23/04/14 and it was updated on 19/10/13 (updated with what?) http://whois.domaintools.com/cosecha-transmisiones.com


The "updated" date in whois means the last time the domain was renewed. I'm seeing April 23rd, 2013 as the last updated date on at that domaintools link you sent. Nothing about October 2013.


under the 'Registration' tab - "Updated:2013-10-19"

Tue Mar 18, 2014 8:46 pm

so i went through and pressed all the buttons. here are the ones that do stuff.

Code:
win. button left: [
win. button right:\
pulldown menu button: ]
numpad 0: -
numpad 1: #
numpad 2: clears text, same with up/down arrow buttons and numpad 8.
numpad 3: "
numpad 4: %
numpad 5: nothing, maybe a zero width space?
numpad 6: '
numpad 7: $
numpad 9: !
numpad /: o
numpad *: j
numpad -: -, like it should
numpad +: k
F1: p
F2: q
F3: r
F4: s
F5: t
F6: u
F7: v
F8: w
F9: x
F10: y
F11: z
F12: {
arrow left: %
arrow right: '
insert: -
delete: .
home: $
end: #
page up: !
page down: "


this is probably totally useless and i'm 85% sure that spending 10 minutes doing this was a waste of time but whatever
Last edited by several on Tue Mar 18, 2014 11:56 pm, edited 1 time in total.

Tue Mar 18, 2014 9:43 pm

several wrote:so i went through and pressed all the buttons. here are the ones that do stuff.


you forgot a few

. = n
+ = k

Tue Mar 18, 2014 10:23 pm

Another little tidbit...

I just tried typing in words with spaces, when I hit the "up" arrow to see what I put in, the spaces were removed from the text...

If others experience the same thing, then it's safe to say there is no spaces allowed in the password (which makes sense, all the numbers were entered together without dashes or spaces).

Tue Mar 18, 2014 10:53 pm

drixlin wrote:Another little tidbit...

I just tried typing in words with spaces, when I hit the "up" arrow to see what I put in, the spaces were removed from the text...

If others experience the same thing, then it's safe to say there is no spaces allowed in the password (which makes sense, all the numbers were entered together without dashes or spaces).


the numerical password still works with spaces in ...

¯\(°_o)/¯

Wed Mar 19, 2014 12:47 am

I know it does - my post may not have been clear - the site removes the spaces you enter in your digits.

You can't see it if you put the right password in.

Type out the sequence with spaces, with one wrong number...then, after you get the error, hit the up arrow and see your incorrect password - now with no spaces.

Tue Apr 22, 2014 6:29 am

Hey guys, someone might have done this already, but i cleaned up cosecha-transmisiones.com's "terminal.js" file that's referenced in "x.js". I figure this could be worth looking into, but it's way over my head, especially at 2 AM. There's a function called "match" that might be worth looking into, and a LOT of one letter variables getting passed around, and it looks like there's a tree getting searched at the core of things.. Dunno how much of this might just be to throw us off the path, but some java wizard might find some gold in here. Some juicy instances of "password" in there.. dunno if this is actually interacting with an actual instance of VAX?? might be worth looking into the interworkings of the OS, i dunno man, the deeper i get into this stuff the more confused i get, which is probably a good sign. :)

https://drive.google.com/file/d/0B93UyS ... sp=sharing

Tue Apr 22, 2014 11:31 pm

I don't have the right combination of time and skills to look at that javascript now, but maybe something could be learned from it. My guess is that when the user enters something (a password), it's sent with an ajax request to the server, which validates it. If the validation is boolean (i.e., just yes or no), then there's nothing more to discover. On the other hand, if the ajax response is more than boolean (i.e., more than just yes or no), then that would indicate there are more behaviors than "password is wrong" and "password is right, here's the video". That still wouldn't necessarily tell us what needs to be typed in to get the third behavior.

Wed Apr 23, 2014 3:03 am

So in a few hours the website is going to expire/shut down?
I have a feeling somthing is going to happen soon. Not sure what but just have a feeling.

Wed Apr 23, 2014 10:28 am

BrunchTime wrote:https://drive.google.com/file/d/0B93UySi7nLY7aUhqSkFMME9JTjA/edit?usp=sharing
lool that's just minified jquery man.

the important bit of what goes on is this:
Code:
var attemptPassword = function(password, success, fail) {

  $.getJSON("password.php?attempt="+password, function(data){
    if (data.error === true){
      ga('send', 'event', 'password', 'fail', password, 1);
      fail();
    } else {
      ga('send', 'event', 'password', 'success', password, 1);
      window.location = data.url;
    }
    console.log(data);
  })
//  var t = setTimeout(fail, 500);
}

i.e. send the password to the server; if it returns a URL go there. So the only functionality is redirection to another URL when a password is properly entered.


fake mistakes wrote:So in a few hours the website is going to expire/shut down?
I have a feeling somthing is going to happen soon. Not sure what but just have a feeling.
No:
Updated Date: 2014-03-22 21:21:19Z

unsurprisingly. When you create a domain name you're pretty much morally obliged to keep it, haha. Otherwise it'd be a prime target for scams / whatever.

M

Wed Apr 23, 2014 5:10 pm

Techboy wrote:
BrunchTime wrote:https://drive.google.com/file/d/0B93UySi7nLY7aUhqSkFMME9JTjA/edit?usp=sharing
lool that's just minified jquery man.


Well shucks. Thanks bruh.

Wed Apr 23, 2014 8:13 pm

Techboy wrote:i.e. send the password to the server; if it returns a URL go there. So the only functionality is redirection to another URL when a password is properly entered.


I'm having a hard time following all this, so is this confirmation that there is no other function than to lead to the Semena Mertvykh video?

Wed Apr 23, 2014 9:14 pm

ryanhewitt wrote:
Techboy wrote:i.e. send the password to the server; if it returns a URL go there. So the only functionality is redirection to another URL when a password is properly entered.


I'm having a hard time following all this, so is this confirmation that there is no other function than to lead to the Semena Mertvykh video?


Yes, the site is empty

Wed Apr 23, 2014 10:16 pm

Najlepsiejszy wrote:
ryanhewitt wrote:
Techboy wrote:i.e. send the password to the server; if it returns a URL go there. So the only functionality is redirection to another URL when a password is properly entered.


I'm having a hard time following all this, so is this confirmation that there is no other function than to lead to the Semena Mertvykh video?


Yes, the site is empty


boner-killer

Wed Apr 23, 2014 11:02 pm

Najlepsiejszy wrote:
ryanhewitt wrote:
Techboy wrote:i.e. send the password to the server; if it returns a URL go there. So the only functionality is redirection to another URL when a password is properly entered.


I'm having a hard time following all this, so is this confirmation that there is no other function than to lead to the Semena Mertvykh video?


Yes, the site is empty


Probably but not necessarily. If the server returns a URL based on the password entered, that doesn't rule out that there could be different URL's returned for different passwords. I haven't looked deeply at the code myself. I'm just going by what Techboy said.

Thu Apr 24, 2014 2:23 pm

^ what he said

Re: What if http://cosecha-transmisiones.com/ has more?

Sun Jan 11, 2015 12:02 pm

Anybody noticed a little dot at the bottom of Password? I didn't see that before

Image

Re: What if http://cosecha-transmisiones.com/ has more?

Sun Jan 11, 2015 11:49 pm

Anyone notice the hexagon if you view page source?

Re: What if http://cosecha-transmisiones.com/ has more?

Mon Jan 12, 2015 5:37 am

just check it on other pc and no dots, probably it's just my bug
Post a reply