Page 1 of 7

Re: Whois?

Posted: 2009.09.16 (16:33)
by 29403
Right...

Re: Whois?

Posted: 2009.09.16 (16:51)
by Spawn of Yanni
Nah, hold on now, it looks like he's thought out a forum puzzle for us. Let's see where it goes.

Re: Whois?

Posted: 2009.09.16 (16:55)
by 29403
I guess. :P

Re: Whois?

Posted: 2009.09.16 (21:44)
by t̷s͢uk̕a͡t͜ư
I'll show you whois...

Code: Select all

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '89.241.0.0 - 89.243.255.255'

inetnum:        89.241.0.0 - 89.243.255.255
netname:        OPAL-DSL
descr:          Opal Telecom DSL
country:        GB
admin-c:        PM58-RIPE
admin-c:        GD1052-RIPE
tech-c:         PM58-RIPE
tech-c:         GD1052-RIPE
status:         ASSIGNED PA
mnt-by:         OPAL-MNT
source:         RIPE # Filtered

person:       Phill Magill
address:      Opal Telecommunications Plc
address:      Northbank Industrial Estate
address:      Irlam
address:      Manchester
address:      M44 5BL
address:      United Kingdom
phone:        +44 161 222-2000
fax-no:       +44 161 222-2008
e-mail:       [email protected]
nic-hdl:      PM58-RIPE
mnt-by:       OPAL-MNT
source:       RIPE # Filtered

person:         Gavin Ditchfield
address:        Opal Telecommunications Plc
address:        Northbank Industrial Estate
address:        Irlam
address:        Manchester
address:        M44 5BL
address:        United Kingdom
phone:          +44 161 222-2000
fax-no:         +44 161 222-2008
e-mail:         [email protected]
nic-hdl:        GD1052-RIPE
mnt-by:         OPAL-MNT
source:         RIPE # Filtered

% Information related to '89.240.0.0/14AS13285'

route:          89.240.0.0/14
descr:          Opal-Net Autonomous System
origin:         AS13285
mnt-by:         OPAL-MNT
source:         RIPE # Filtered

% Information related to '89.242.0.0/15AS13285'

route:          89.242.0.0/15
descr:          Opal-Net Autonomous System
origin:         AS13285
mnt-by:         OPAL-MNT
source:         RIPE # Filtered
No other user or post uses that same IP.

Otherwise,
His YouTube video contains the text "whoistheenigmaiamtheenigma" and links to some Java encryption page.
I don't have sound on this machine, so I didn't hear any sound that might've played with the video.

Text from his only map ("11th") is from Luke 11:39, text specifically from the New International Version.
Text in map data: http://i970.photobucket.com/albums/ae18 ... tember.png
This image is reproduced below:
Image

There is no slightly off-color text in the image. The background color is #CCCCCC, and the text color is #000000.
Hex dump for the file is nothing out of the ordinary for a PNG.
(For the record, these forums were created in / the Metanet Exodus happened in September 2008.)

Googling "A102938" gives, most notably, a number sequence, someone having issues with his PS3, "amber[looserface] !!", and this Asian fellow.

Without the "A", we have a spam page for "online school poker debt consolidation" and some loser who thinks he's a vampire.

Anyway, I'm thinking one of these keywords given is the decryption key (for that "JavaScypt" page) for some cypher I haven't found yet.
The encrypted text will either be groups of five capital letters beginning with "ZZZZZ", a series of valid hexadecimal characters (0-9, a-f) between "?HX?" and "?H", or a series of any sort of characters between "?b64" and "?64b".


Other crap:
If 102938 is actually 0x102938, it doesn't become anything meaningful when changed to decimal or octal. Neither does 0x0A102938 or 0xEA102938.
However, 102938 in hex is 0x1921a, which might be valuable information.

Re: Whois?

Posted: 2009.09.16 (22:03)
by T3chno
So he's Phill Magill.

/noted.

Re: Whois?

Posted: 2009.09.16 (22:13)
by t̷s͢uk̕a͡t͜ư
Flight wrote:So he's Phill Magill.

/noted.
No, Phill Magill is the network administrator to contact if you have questions about the ISP this EnigmA person uses.

Re: Whois?

Posted: 2009.09.16 (22:21)
by Spawn of Yanni
Map 102938 on NUMA appears to have no significance. turtles doesn't seem to have any connection to this, IP-wise at least.

Re: Whois?

Posted: 2009.09.16 (23:10)
by t̷s͢uk̕a͡t͜ư
I think I know the answer, but I got it using privileged information (and I doubt he intended his identity to be found the way I did).
If I'm right, I won't reveal it, unless I find his name the way he intended us to as well.

Re: Whois?

Posted: 2009.09.16 (23:54)
by a happy song
Image

Amiright?

Re: Whois?

Posted: 2009.09.17 (00:06)
by Spawn of Yanni
brighter wrote:Image

Amiright?
Alphabetical. "+Who +is +the +Enigma"

Re: Whois?

Posted: 2009.09.17 (00:33)
by Yoshimo
Kablizzy. Case closed.

Re: Whois?

Posted: 2009.09.17 (06:36)
by lord_day
Spawn of Yanni wrote:Alphabetical. "+Who +is +the +Enigma"
And Nreality refers to the image in the map that Tsukatu found. If you load the map in Nreality, that image is the background.

On another note, the map is named 11th, the image is http://i970.photobucket.com/albums/ae18 ... tember.png - i.e, called September, and the image displays the year 2008. That makes me think that we are looking at the date of the 11th September 2008?

Re: Whois?

Posted: 2009.09.17 (08:10)
by t̷s͢uk̕a͡t͜ư
lord_day wrote:
Spawn of Yanni wrote:Alphabetical. "+Who +is +the +Enigma"
And Nreality refers to the image in the map that Tsukatu found. If you load the map in Nreality, that image is the background.

On another note, the map is named 11th, the image is http://i970.photobucket.com/albums/ae18 ... tember.png - i.e, called September, and the image displays the year 2008. That makes me think that we are looking at the date of the 11th September 2008?
THIS IS CLEARLY A TERRORIST THREAT EVERYONE IS BANNED FOR THEIR OWN SAFETY

Re: Whois?

Posted: 2009.09.17 (08:20)
by a happy song
Spawn of Yanni wrote:
brighter wrote:Image

Amiright?
Alphabetical. "+Who +is +the +Enigma"
Yeh, we know how tags don't work.

T'was a joke. I'm hilarious. Etc...

Re: Whois?

Posted: 2009.09.17 (15:16)
by Tunco
Tsukatu wrote:
Flight wrote:So he's Phill Magill.

/noted.
No, Phill Magill is the network administrator to contact if you have questions about the ISP this EnigmA person uses.
He is Gavin Ditchfield.

Re: Whois?

Posted: 2009.09.17 (18:04)
by fawk
Tunco123 wrote:
Tsukatu wrote:
Flight wrote:So he's Phill Magill.

/noted.
No, Phill Magill is the network administrator to contact if you have questions about the ISP this EnigmA person uses.
He is Gavin Ditchfield.
Brilliant! Now, who is that?


Ooh, this is exciting, I've never been in a forum puzzle before.

Having said that, I only have a small thing to add. The numbers 102938 which are on the YT channel someone linked to above, when you take the number from the far left side, then far right side, then second from the left, then second from the right and so on. If you stop at 8, that's what you get. 102938. Don't know if that helps, actually.

Re: Whois?

Posted: 2009.09.17 (19:31)
by t̷s͢uk̕a͡t͜ư
These forums didn't have any members before September 18th, 2008.
Three members registered on the old forums on that date, though: toasters, subrama6, and BionicCryonic. I think he might be our man.

I'm still curious about the JavaScrypt thing, though.

Re: Whois?

Posted: 2009.09.17 (20:09)
by EdoI
Tsukatu wrote:These forums didn't have any members before September 18th, 2008.
Three members registered on the old forums on that date, though: toasters, subrama6, and BionicCryonic. I think he might be our man.
Well, which one of them is British?

Re: Whois?

Posted: 2009.09.17 (22:27)
by t̷s͢uk̕a͡t͜ư
EdoI wrote:
Tsukatu wrote:These forums didn't have any members before September 18th, 2008.
Three members registered on the old forums on that date, though: toasters, subrama6, and BionicCryonic. I think he might be our man.
Well, which one of them is British?
None of them. :\

Re: Whois?

Posted: 2009.09.17 (22:51)
by otters~1
Tsukatu wrote:I think I know the answer, but I got it using privileged information (and I doubt he intended his identity to be found the way I did).
If I'm right, I won't reveal it, unless I find his name the way he intended us to as well.

Tsukatu (later) wrote:Three members registered on the old forums on that date, though: toasters, subrama6, and BionicCryonic. I think he might be our man.
Are you now trying to lead us on a false trail, were you wrong in your original guess, or are you giving us hints?

Re: Whois?

Posted: 2009.09.18 (00:45)
by Pikman
Back to this 9/11/2008 thing. The world could have been over on that day, because the LHC was turned on the day before. But otherwise, nothing happened.

Corresponding with the date the YouTube video was posted, there is an edit on the Wikipedia page "2008" by an unknown user, with a different IP than the one Suki posted. Not sure if this matters, but on April 26, it was edited to "The world will end" and all the entries afterward were deleted. Note that the listing for April 27 was:
April 27 – The Taliban attempts to assassinate Afghan President Hamid Karzai in a military parade in Kabul.[55]
Left the reference link in, in case it matters.

Re: Whois?

Posted: 2009.09.18 (15:46)
by Rhekatou
Aww shuckles, I found it out. And none of you saw it. :DDD O_o

Re: Whois?

Posted: 2009.09.19 (00:28)
by Universezero
If join date is anything to go by, then this person could be one of 32 people, not counting myself.

----------------
Now playing: Calvin Harris - The Rain
via FoxyTunes

Re: Whois?

Posted: 2009.09.19 (06:57)
by fawk
Universezero wrote:If join date is anything to go by, then this person could be one of 32 people, not counting myself.

----------------
Now playing: Calvin Harris - The Rain
via FoxyTunes
Why not including yourself? :P

Re: Whois?

Posted: 2009.09.22 (20:21)
by t̷s͢uk̕a͡t͜ư
THEENIGMAHASFAILEDTOHOLDOURATTENTION