Scariestthingieversaw.com

From Super8

Revision as of 16:24, 17 December 2010 by Adm BlackCat (Talk | contribs)
Jump to: navigation, search

ScariestThingIEverSaw.com

Contents

Discovery

  • May 6th 2010, after analyzing the bootlegged teaser trailer, the words "scariest thing i ever saw" were found at the trailing end of the film reel, leading to the website.


Console

On loading the website, the RemoteView interface begins booting.

May 7, 2010

Notes from console content below:

  • Version: RemoteView 2.7, ©Copyright CBCData 2002
  • Behind the console popup screen is another window, a prompt reading "Print all pages to default printer OK/Cancel". On clicking OK, the user can select an available printer, and a single page is printed with the text message from an unknown sender:
Stop posting publicly. I can answer your questions.
I have proof.

>>>>
  • Bringing focus to the primary window and following prompts reveals this content:
------------------------------------------------------------
PDP-11 Simulator
License 1130-A23R-12TR-2090
------------------------------------------------------------
Copyright 1977, DAC, Acton, Mass.
THIS SOFTWARE IS FURNISHED TO A PURCHASER UNDER A LICENSE FOR
USE ON A SINGLE COMPUTER SYSTEM AND CAN BE COPIED ONLY FOR USE
IN SUCH SYSTEM, EXCEPT AS MAY OTHERWISE BE PROVIDED IN WRITING
BY DAC OF ACTON, MASS. U.S.A.

VERSION 05.5

D. MORRIS 05-FEB-77

PERFORM PRELIMINARY SYSTEM CONFIGURATION
SET CPU 128K
SHOW CPU IOSPACE
DXMNSJ.SYS
SWAP.SYS
STARTS.COM
D 56=5015
SET TT:NOSCOPE

D 56=0
R TIMDAT
------------------------------------------------------------
STALOG AF
Secure File Structure
------------------------------------------------------------
.BOOT DX1:DXMNSJ.SYS
RUN $EXEC
Continue Y/N?
------------------------------------------------------------
STALOG AF
------------------------------------------------------------
------------------------------------------------------------

RUN $LINK
*MAIN=MAIN,SUBR/S
*+Z
Continue Y/N?
RUN $LINK2F
*PROG=MAIN,MACSUB/F
*+Z
Continue Y/N?
------------------------------------------------------------
STALOG ACCESS
------------------------------------------------------------
.UNPROTECT/SYSTEM *.*
        DK:SWAP.SYS
        DK:RT11AI.SYS
        DK:RT11PI.SYS
        DK:RT11BL.SYS

CRSCT:  .BLKW   10.
CRVSC:  .BLKW   1
LOADNM: .RADSR  /$LOAD/
MODN        .BLKW   1
LCLSYM: .BLKW   8.
SRCPF:  .BLKW   1
SRVSG:  .BLKW   1
SYDEF:  .BLKW   1
SYENT:  .BLKW   1
SYFLG:  .BLKW   1

            .PSECT



Press any key to continue...
------------------------------------------------------------
8955655DD XST a3 FILE LIBRARY
------------------------------------------------------------

RUN $EXEC
TU56 dual DECtape drive
System Now Loading External Data
[1] Previously accessed
[2] Previously accessed
[3] Accessing File List B4 - ###### of 134640 Bytes Loaded
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
------------------------------------------------------------
Execute - E []   Commit To Tape Drive - C []    Print - P []
------------------------------------------------------------

References to note:

  • PDP-11 - A series of 16-bit minicomputers from DEC [1]
  • "DAC" in Acton, MA
  • "D. Morris" and Feb 5, 1977 are referenced - The programmer of the PDP-11 Simulator?
  • "File List B4" is 134640 bytes, loading in segments, downloading at approximately 1 bytes every five seconds. Calculating backwards based on bytes remaining at any point, the "file list" should be fully downloaded around 11pm ET, May 13 2010.
  • STALOG: Study of the Automation of Logistic System [2]
  • TU56 dual DECtape Drive: "The tape is normally formatted with 1474 block of 129 12 bit words per block. Only 128 words are normally used in each block. This gives a capacity of 184K words per tape."[3]

Analyzing the source:

  • DEQNA.swf is the filename containing the terminal interface. DEQNA was an Ethernet adapter from DEC[4] used on the PDP-11[5]
Console boot screen

Console desktop

Console toolbar

Hidden printable message

Console text content


May 13, 2010

With the file completely downloaded, the RemoteView terminal continued to display the following text:

------------------------------------------------------------
AF FILE LIBRARY
------------------------------------------------------------
Sector 9909                             []
DD09 Extract                            []
CL03 Transmission                       []
CL05 Extract                            []
CL56 Token                              []
------------------------------------------------------------

The terminal then prompts the user to re-connect

Session disconnected.
Connection timed out.
Please re-connect.

Once updates completed, the file load text changed. New options became available.

(Note: Instances of "AF-B4.01" initially appeared without the ".01", which was added with the June 1 update.)
---------------------------------------------------------------------------------------------
Execute - .EXEC []  Commit To Tape Drive - .COMT []   Print - .PRINT []   Reenter - .REENTER
---------------------------------------------------------------------------------------------

fd = open ("DEV1:", O_WRONLY);
status = ioctl (fd, FIODISKINIT, 0);

struct stat statStruct;

fd = open ("AF-B4.01", O_RDONLY);
status = ioctl (fd, FIOFSTATGET, &statStruct);




---------------------------------------------------------------------------------------------
AF-B4.01
---------------------------------------------------------------------------------------------
AF-B4.01 DIR

 Sorted by: type
 Volume ID: DD1
 Owner    : 

A5RSR  .BAS   11
A5RST  .BAS   15
RSCOM8 .DAT   13
A5RSR1 .WRK   5
CL03   .WRK   2
DD09   .WRK   2
GRMF55 .WRK   5
FATR7  .WRK   3
FATR8  .WRK   8
GMRF36 .TXT   5
GMRF71 .TXT   4

---------------------------------------------------------------------------------------------
Execute - .EXEC []  Commit To Tape Drive - .COMT []   Print - .PRINT []   Reenter - .REENTER
---------------------------------------------------------------------------------------------

  • The only working command:
.PRINT RSCOM8
produces two printable pages. Looking closely, there are two "X"s on each page. If page 1 is rotated 180° and the X's aligned, the darker highlighted regions also located on page 1 will align over specific words on page 2.
Rotated page 1 with highlighted markings
Page 2 with aligned X's and highlighted words
Original page 1
See May13-Newspaper

Original page 2
See May13-Newspaper
  • The highlighted words listed without punctuation are:
no certainty if a live may be after us we go underground
The phrase may be interpreted various ways, but it implies this general theme - "There is no certainty if [target] is alive. [Target] may be after us. We must go underground to hide from [target]."

  • The command:
.REENTER
leads to a new terminal prompt:
------------------------------------------------------------
PDP-11 Simulator
License 1130-A23R-12TR-2090
------------------------------------------------------------
MOUNT Continue Y/N? Y

DEVICE?

  • All attempts to input something into the device field (i.e. DEV1 or AF-B4) return this result:
?IND-F-Invalid Request


(images)

June 1, 2010

  • A new folder appears under the "Print documents" window named "Braegen14". It contains a file called "expcnv.dat".
  • On trying to open the file "expcnv.dat", an error appears reading '"Required components not found. No supporting application".
  • On returning to the text console command prompt, the filename now appears in the file list
A5RSR  .BAS   11
A5RST  .BAS   15
RSCOM8 .DAT   13
EXPCNV .DAT   4
A5RSR1 .WRK   5
CL03   .WRK   2
DD09   .WRK   2
GRMF55 .WRK   5
FATR7  .WRK   3
FATR8  .WRK   8
GMRF36 .TXT   5
GMRF71 .TXT   4

  • Entering:
.EXEC EXPCNV
then states "Seeking External drive:" and displays a prompt "Simulator seeking external source. Enter path:"
  • Entering the path "/desktop/Braegen14/expcnv.dat" directs the console EXEC command to the raw file for execution.
  • When executed, expcnv.dat is found to be audio data (MP3)
Spectrogram of the sound
Wave form of the sound
Frequency analysis
  • The tones are centered approximately around frequencies (hz): 550, 800, 550, 900, 500, 650, 650, 950
    The tones appear to be separated in increments of 50hz.
    As a pattern, with 500 being the lowest represented as 0, the tone pattern becomes 16180339 - a sequence familiar as the Golden Ratio.
The folder "braegen14" opened with "expcnv.dat" inside.
The error that appears on attempting to open "expcnv.dat".
When the user enters: ".EXEC EXPCNV"
Window appears: Seeking external device, after entering ".EXEC EXPCNV".


June 21, 2010

I think something may have reactivated. Need to make sure we're still alone.
Keep it hidden until further contact.

>
> See. I have the damn thing. What is it?
>
>
>> Stop posting publicly. I can answer your questions.
>> I have proof.
>>>
>>>>
  • The photo contains a very dim reflection. When flipped and enhanced, a sold note can be read on the box, along with the zip code "25801", for West Virginia. On the box is a ladies' hat with a golden monkey pin broach.
  • A hat matching that on the box was found listed on Craigslist [1], also located in West Virgina.
New hidden printable message

Reflection flipped and enhanced
  • The AF-B4.01 directory command prompt now interprets keys 0, 1, and 2 as enter, Y, and N, respectively. This breaks the ability to enter certain commands. (This "feature" previously existed on every prompt prior to the May 13th update.)

July 28, 2010


  • The 21 June 2010 printable file was updated again.

New message on printout reads:

If you're who I think you are, it's about your father. I'll tell you more when I can, but you must take down those sale listings. Anything you found may be important.

> I've been quiet. PLEASE - what is this about??

  • After discovery of the new printout a check of the Craigslist Estate Sale items found they were no longer available.

September 9, 2010

  • The printable file was updated again.

New message on printout reads:

   They're looking in the wrong place. But I still found you easily. If you
   want to find your father we'll have to be more careful. I'm working on it.
   >Are you still there?? Hello??
   >> I don't know who you are but I'm getting really tired of these games.
   >> If you actually know anything, come out and say it. Otherwise, I'm
   >> not going to respond to your crypic messages.
   >>> Ok, I took everthing down. Who do you think I am? What do you know
   >>> about my father?

There is also a new folder on the desktop "Audio". It has an audio file "untitled.mp3" which is believed to be a conversation between two people possibly at a shop of some kind.

Rough transcription:

    Voice 1 "I'm sorry I didn't see you back there"
    Small dog barks.
    A mumble.
    Voice 2 "if we had any it'd be right there /(out here)"
    Voice 1 "blue cam lion on it, do you think there's any in back now" {emphasis on back)
             - during a little bell rings as a customer enters/leaves the store.
    Voice 2 "no"
    Voice 1 "Ok, sorry"
    Also throughout street noise and paper rustle.

Sept. 30, 2010: Chat Icon

  • Chat Icon appears on lower tool bar after clicking on the left hand arrow.

Oct. 14, 2010: 4D & 5O printout

  • New print out reads:
   "Meet me at 4D & 5O's last leg. Bring the foghorn and the unexpected title."
NOTE: 5O = The letter O, NOT the number Zero.
  • This is the clue for the password to the Chat, and also the time when the Chat will happen.
    • 4 Down & 5 Over on the October Calendar. "Last Leg" the latter of the two times.
    • Foghorn and the unexpected title: the answers can be found at hooklineandminker.com
      • The foghorn refers to the Toadfish and the foghorn sound it makes.
      • The unexpected title refers to the August 21st Post on hooklineandminker.com.
      • The password for the chat is TOADFISH112

Oct. 21, 2010: Chat Icon Active

  • Clicking on the chat icon brings up a password prompt. Use the clues "Bring the foghorn and the unexpected title." from the Oct. 14 printout to solve the password: TOADFISH112.
  • Time of the chat was solved by the first part of the printout: Oct. 21, at 11:09PM Eastern Time. (Josh's time zone.)
Oct. 21 Chat Session
Chat log, READ BOTTOM TO TOP

Transcript (READ TOP TO BOTTOM)

   ***chat session '2010-10-21' initiated***
   ***Host has joined***
   ***Guest1 has joined***
   
   Guest1: hello?
   Host: good. this is more secure
   Guest1: who are you?
   Host: i can help to find your father
   Host: he needs your help
   Guest1: that doesnt make sense
   Guest1: ive never met him
   Guest1: how do you know him?
   Host: I'm here to help you find your father
   Guest1: Is hein trouble or soemthing?
   Host: Those items you were asking abou: the oney your mother left you: some of them may
   have belonged to your father they may be important
   Guest1: important how?
   Host: tyell me exactly what they are
   Guest1: that scrap of film from the canister
   Guest1: a picture of some guys in front of a building, looks like a hangar?
   Guest1: and a metal cyilinder with three dots on it
   Host: Is there anything inside the cylinder?
   Guest1: no it's empty
   Guest1: why?
   Host: is that everything?
   Guest1: i think so
   Host: please look again. I believe he may have hidden something that will help us find him
   Host: i'll share more of what i have and maybe it will help you
   Guest1: i didn't understand what you sent before. this is crazy
   Host: please look now. i'll be back when it's safe
   Guest1: buthow will i know it if i find it?
   
   ***Host has left***
   ***Guest1 has left***
   ***chat session '2010-10-21' terminated***

Nov. 13, 2010: Badges Update

  • First appearance of the 3-Dots mentioned in the Oct. 21th chat.
  • Notice the word TROGL on RSOA01.dat.
RSOA01.dat
RSOA02.dat
RSOF01.dat
RSOF02.dat

Dec. 10, 2010: New Printout

Message reads:

Yes, this could be important. But you must stop using this account. Same protocol. 3D & 5O's last leg.

>OK I found something -- nothing in my mother's things but that badge reminded me -- >check this out!! I think some random book club sent it to me when I was a kid but it's >the same word, right??? Even the handwriting looks the same. What the hell does that >mean???
  • The photo is of an ad in "Classics Illustrated". Most likely Moby Dick.
  • The word TROGL is written at the top.
  • The word "binder" is circled.
  • The word "backbone" is partially crossed out.
  • 3D & 5O: Viewing the December calendar as a grid, start at the top and go 3 DOWN & 5 OVER, giving us Dec. 16th. Last leg is the later time: 8:03PM Eastern Time for the next chat. Password is expected to be the same: Toadfish112.
Dec. 10th printout
Binder Ad from Classics Illustrated

Dec. 16th Chat Session

New chat happened on Dec. 16th. (3Down and 5Over on the December calendar). Josh did not show up, but the Mystery Person sent him a message regardless.

Chat log, READ BOTTOM TO TOP

Transcript (READ TOP TO BOTTOM)

   ***chat session '2010-12-16' initiated***
   ***Host has joined***
   
   Host: I need that book. I hope you haven't changed your mind.
   Host: I can still help you find your father.
   Host: I can't stay. In the good faith, I'll upload a picture. You told me you wanted to see him.
   Host: We were co-workers. A long time ago.
   Host: he trusted me.
   Host: when others didn't
   Host: he knew I understood what he went through
   Host: i'll be here next week. same protocol.
   
   ***Host has left***
   ***chat session '2010-12-16' terminated***

MISC. - OOG

Truck with 3-Dots

From the set of 'Super8' in Weirton, WV.

On set in Weirton, WV

The person on the back of the truck is JJ Abrams.

GPS Coordinates & Bad Robot

When the "Classics Illustrated" photo that is posted with the Dec. 10th STIES update is extracted from the flash file the metadata associated with the .jpg file reveals GPS Coordinates: N 34 1.14 W 118 28.91 These are the coordinates for Bad Robot Productions in Santa Monica, CA. This is the first direct connection between an In-Game element and Bad Robot.

References

  1. ? PDP-11: http://en.wikipedia.org/wiki/Pdp-11
  2. ? STALOG: http://www.nap.edu/openbook.php?record_id=10450&page=39
  3. ? TU56: http://www.pdp8.net/tu56/tu56.shtml
  4. ? DEQNA: http://vt100.net/manx/details/1,985
  5. ? PDP-11 Simulator with DEQNA: http://simh.trailing-edge.com/pdp11.html
Personal tools
[Support Wikibruce]
Wikibruce