Thu May 15, 2025 11:25 am

Thu May 15, 2025 11:59 am
Thu May 15, 2025 2:31 pm
Thu May 15, 2025 2:31 pm
bsun wrote:Hi all,
First post here, but I've been a silent observer for more than a decade.
The domain cosecha-transmisiones.com refers to 7 gateway IPs:
104.21.16+x.1, where x=0,16, 32, ... n*16
Locating the 7 gateway IPs leads to a hexagon shaped area near San Francisco, see image
This seems quite intentional, but could also be a cloudfare thing, i don't know.
I searched the area for... I really don't know what. Without any further clues it is quite pointless I think. But maybe you have an idea.
Sorry if this is already known, I honestly didn't check every post here and during the 2013 ARG I just started listening to BoC. I missed all the fun by a few weeks.
Thu May 15, 2025 3:51 pm
hexagonFox wrote:User Count is Back up to the 500's
Thu May 15, 2025 4:06 pm
Thu May 15, 2025 4:13 pm
Thu May 15, 2025 7:09 pm
bsun wrote:Hi all,
First post here, but I've been a silent observer for more than a decade.
The domain cosecha-transmisiones.com refers to 7 gateway IPs:
104.21.16+x.1, where x=0,16, 32, ... n*16
Locating the 7 gateway IPs leads to a hexagon shaped area near San Francisco, see image
This seems quite intentional, but could also be a cloudfare thing, i don't know.
I searched the area for... I really don't know what. Without any further clues it is quite pointless I think. But maybe you have an idea.
Sorry if this is already known, I honestly didn't check every post here and during the 2013 ARG I just started listening to BoC. I missed all the fun by a few weeks.
Thu May 15, 2025 7:44 pm
derp! wrote:if there are seven, why wasn't that point plotted on the map?
derp! wrote: where are these numbers coming from when all anyone else can find on the website are certificate exp dates?
Fri May 16, 2025 3:22 am
<html><head><link rel="stylesheet" href="resource://content-accessible/plaintext.css"></head><body><pre>nobody home... /// -. --- -... --- -.. -.-- / .... --- -- . .-.-.- .-.-.- .-.-.-</pre></body><style type="text/css"></style></html>/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
pre {
white-space: pre-wrap;
word-wrap: break-word;
-moz-control-character-visibility: visible;
}
.nowrap pre {
white-space: pre;
}
/* Make text go with the rules of dir=auto, but allow it to be overriden if 'Switch Text Direction' is triggered */
html:not([dir]) pre { /* Not a UA sheet, so doesn't use :-moz-has-dir-attr */
unicode-bidi: plaintext;
}
@-moz-document unobservable-document() {
:root {
color-scheme: light dark;
}
}
/* NOTE(emilio): For some reason some pages, mainly bing.com, load a bunch of
* scripts in zero-size <object> elements, see bug 1548449.
*
* Line-breaking such documents is useless and pretty expensive, so only render
* them if there's a viewport. Sigh.
*/
@media (width: 0) or (height: 0) {
:root {
display: none;
}
}
Fri May 16, 2025 3:55 am
Fri May 16, 2025 4:04 am
doshan wrote:I am either crazy, (and dumb) or BoC is saying game on.
Fri May 16, 2025 5:47 am
doshan wrote:Sorry for double posting, I am unable to edit my post after enough time has passed I suppose...
I am still tinkering around and found something strange. Using browser Dev Console, I see under network the html page, but also favicon.ico. Well, you may have noticed the website doesn't have a favicon image in the tab... It is sending an image request, but returning instead the message, nobody home.
I just feel like there has to be something more going on here, but I don't know enough about web development to make anything out of it. I've tried editing the CSS to no success. May look into JS injection? Anyone have experience with this stuff? I am either crazy, (and dumb) or BoC is saying game on.
Fri May 16, 2025 6:41 am
niski wrote:there is nothing going on in there. if there was a hidden document it would have to be embedded into the HTML. CSS could have some leftover stuff from the old instance of the site anyway
and half of the terms you mentioned like JS injection aren't even relevant to what you've found in any way possible
body {
margin:0;
background-color:#000;
padding:3px;
font-family:monospace;
color:#22FF07;
font-size:14px;
min-height:100%;
min-width:100%;
}
h1,
h2,
h3,
ul li {
margin:0;
font-size:14px;
font-weight:normal;
}
h1 {
font-weight:bold;
text-align:center;
padding:20px 0;
}
p {
margin:5px 0;
}
a {
color:#22FF07;
text-decoration:none;
}
a:hover {
color:#22FF07;
}
ul {
list-style:none;
margin:0;
padding:0;
}
h2 {
clear:left;
padding-top:10px;
font-weight:bold;
}
h3 {
margin-top:10px;
font-style:italic;
}
#terminal-container {
width:100%;
padding-bottom:16px;
position:relative;
}
#command-line {
float:left;
position:absolute;
left:0;
bottom:0;
right:0;
}
.completed-command,
#command-line,
#command-line span,
.completed-command span,
#command-line .commands,
.completed-command .commands {
float:left;
}
#command-line span,
.completed-command span {
margin-right:5px;
}
#command-line .commands b {
display:block;
background-color:#22FF07;
width:0.75em;
height:1em;
float:right;
}
.completed-command .commands b {
display:none;
}
/*
FILE ARCHIVED ON 02:53:32 May 12, 2013 AND RETRIEVED FROM THE
INTERNET ARCHIVE ON 06:30:05 May 16, 2025.
JAVASCRIPT APPENDED BY WAYBACK MACHINE, COPYRIGHT INTERNET ARCHIVE.
ALL OTHER CONTENT MAY ALSO BE PROTECTED BY COPYRIGHT (17 U.S.C.
SECTION 108(a)(3)).
*/
/*
playback timings (ms):
captures_list: 0.622
exclusion.robots: 0.025
exclusion.robots.policy: 0.013
esindex: 0.011
cdx.remote: 19.404
LoadShardBlock: 104.955 (3)
PetaboxLoader3.datanode: 71.454 (4)
load_resource: 267.261
PetaboxLoader3.resolve: 203.641
*/
Fri May 16, 2025 7:05 am
Fri May 16, 2025 8:43 am
Fri May 16, 2025 8:53 am
Fri May 16, 2025 8:55 am
doshan wrote:EDIT: I realize I don't know the meaning of terms, and I admit I am talking out of my a** a little bit. However, just because I don't know the specific name for something I am not familiar with, does not invalidate the fact that there could be something to find.niski wrote:there is nothing going on in there. if there was a hidden document it would have to be embedded into the HTML. CSS could have some leftover stuff from the old instance of the site anyway
and half of the terms you mentioned like JS injection aren't even relevant to what you've found in any way possible
I think that seeing the favicon.ico returning as text was a cool find... I suppose my question is what is going on with this CSS if there is nothing here? Why leave in the comments about a mozilla bug that loads scripts inside zero size elements? if this is a bare bones, plain text site, why are they being so specific about the way text is wrapping and the direction of the text? It just seems like a lot of effort for what? Making sure it loads correctly on mobile?
And, by JS injection I was referring to using dev console to interact with the page using JS, while yeah it may not be technically called "JS injection" but it is very possible to lob JS commands at it and have it do something to the page. I am sorry I do not know the exact term for that, I am not claiming to be a web developer, or any kind of developer.
Personally I think this is something, but if you know for a fact why they created the style sheet the way they did I will take your word for it.
Why make it so all pages return status 200 rather than 404 page does not exist? Why the 7 static IP addresses that all end in multiples of 16? Why the comment about scripts loading in zero size containers? Maybe each on their own, I would say "who knows" but, the fact that there is multiple 'weird' things going on has me intrigued. With a website so deliberately cleaned up to include a simple message, I would think the CSS wouldn't have random dev comments left in. BoC seems too meticulous for that sort of thing (not that I assume they are personally writing the code for the site, but you know what I mean)
I appreciate the reality check. I understand about maybe the CSS being left over but it's named plaintext.css, while using the wayback machine I can only load pages back from the debut of the site, and so far I've found terminal.css, (which is the actual css from back then):
- Code:
body {
margin:0;
background-color:#000;
padding:3px;
font-family:monospace;
color:#22FF07;
font-size:14px;
min-height:100%;
min-width:100%;
}
h1,
h2,
h3,
ul li {
margin:0;
font-size:14px;
font-weight:normal;
}
h1 {
font-weight:bold;
text-align:center;
padding:20px 0;
}
p {
margin:5px 0;
}
a {
color:#22FF07;
text-decoration:none;
}
a:hover {
color:#22FF07;
}
ul {
list-style:none;
margin:0;
padding:0;
}
h2 {
clear:left;
padding-top:10px;
font-weight:bold;
}
h3 {
margin-top:10px;
font-style:italic;
}
#terminal-container {
width:100%;
padding-bottom:16px;
position:relative;
}
#command-line {
float:left;
position:absolute;
left:0;
bottom:0;
right:0;
}
.completed-command,
#command-line,
#command-line span,
.completed-command span,
#command-line .commands,
.completed-command .commands {
float:left;
}
#command-line span,
.completed-command span {
margin-right:5px;
}
#command-line .commands b {
display:block;
background-color:#22FF07;
width:0.75em;
height:1em;
float:right;
}
.completed-command .commands b {
display:none;
}
/*
FILE ARCHIVED ON 02:53:32 May 12, 2013 AND RETRIEVED FROM THE
INTERNET ARCHIVE ON 06:30:05 May 16, 2025.
JAVASCRIPT APPENDED BY WAYBACK MACHINE, COPYRIGHT INTERNET ARCHIVE.
ALL OTHER CONTENT MAY ALSO BE PROTECTED BY COPYRIGHT (17 U.S.C.
SECTION 108(a)(3)).
*/
/*
playback timings (ms):
captures_list: 0.622
exclusion.robots: 0.025
exclusion.robots.policy: 0.013
esindex: 0.011
cdx.remote: 19.404
LoadShardBlock: 104.955 (3)
PetaboxLoader3.datanode: 71.454 (4)
load_resource: 267.261
PetaboxLoader3.resolve: 203.641
*/
Fri May 16, 2025 12:12 pm
Sat May 17, 2025 4:42 am