Deus Ex Human Revolution ARG

[KingNL]

Updated OP, please slow down a bit guys

[richie98521]

maybe its JC Dentons desk from the original deus ex
theres an eiffel tower and stuff about the illuminati and during the first one he does go to paris to contact a former Illuminati leader
im probly way off but still

tried the login/pass from the first game JCD and bionicman but nooope

[Discoman]

Originally Posted by Thrace

Using a hacking minigame on the site atm, i got the vid http://sarifindustries.com/en/sec/E-SO-SecurityHack.mp4 . Seems like footage of the attackers in the beginning of the game.

Yeah, that's pretty old.

I love the 13311tower.com site description, "Let's bring the bastards down, together!"

Lazarus seems like a good idea. Too bad we wouldn't know what his password is.

[Ehrine]

Originally Posted by SiPB

Just had a look at the javascript on the website nothing too interesting in there I could make out using http://jsbeautifier.org/ to unminify the code. However I have noticed that the name for each of the username and password is as follows.

Username = M6dCM2ZJxv
Password = s069trV5XA

They're actually references to the field names in the form (the username field is called M6dCM2ZJxv and the password is called s069trV5XA.

Looking at the full beautified version of the .js, the first couple of functions create the 3000 or so image block lines designed to obfuscate the point you need to click to make the form appear. The main juice of it is the section

function goform(_0x5289x3) {
    $j('.container')['html']($j('.container')['html']() + _0x5289x3);
    $j('.CDyjK9kxxV')['fadeIn'](200);
    $j('input[placeholder]')['placeholder']();
    $j('.container form')['submit'](function () {
        $j['ajax']({
            url: 'actions/k5G2dyYRvN.php',
            data: 'tqhyyDitPn=' + $j('input[name=M6dCM2ZJxv]')['val']() + '&ReBwsoTXvb=' + $j('input[name=s069trV5XA]')['val'](),
            success: function (_0x5289x3) {
                if (_0x5289x3) {
                    reveal(_0x5289x3);
                } else {
                    $j('input[name=M6dCM2ZJxv]')['val']('');
                    $j('input[name=s069trV5XA]')['val']('');
                };
            }
        });
        return false;
    });
};

which I think is where the usename and password are tested, running the reveal function if correct. Thing is, I suck at javascript...

[NetCliche]

Thanks for the replies guys

Hope I can find the damn password with you now lol

[Yaguar]

FC + SG = AW

QM J TW 8 D0 (from the original cypher)

6 3 + 19 7 = 1 23 (Letters -> Numbers).

Pretty sure the post it means this person (if they aren't them) is linked to Ben Saxon. However wont be part of the Tyrants (due to their link with the Illuminati). On this basis it is unlikely to also be someone from Belltower or TYM which only really leaves someone from Sarif Industries.

Only person jumping to my mind is Vasili Sevchenko.

EDIT: How I got to Sevchenko from Saxon is beyond me...

[initnull]

The way the html code is done on 13311tower.com is weird, it's almost like the jpg contains the username and the morse code the password.

We already know that the morse code says "limbclinic"

I'Ve looked at the exif header of http://cdn2.netops.eidosinteractive....13311tower.jpg

there's is a GPS entry in the file (which is completely weird since it's a CGI file )

<rdfescription rdf:about=''
xmlns:exif='http://ns.adobe.com/exif/1.0/'>
<exif:GPSLatitude>25,20.702066S</exif:GPSLatitude>
<exif:GPSLongitude>131,2.051582E</exif:GPSLongitude>
<exif:GPSVersionID>2.3.0.0</exif:GPSVersionID>
</rdfescription>

[SiPB]

Originally Posted by thefang01

I think it's just the preset placeholders ("username"/"password")

data: 'tqhyyDitPn=' + $j('input[name=M6dCM2ZJxv]')['val']() + '&ReBwsoTXvb=' + $j('input[name=s069trV5XA]')['val'](),
            success: function (_0x5289x3) {
                if (_0x5289x3) {
                    reveal(_0x5289x3);
                } else {
                    $j('input[name=M6dCM2ZJxv]')['val']('');
                    $j('input[name=s069trV5XA]')['val']('');
                };
            }

If the real password is entered, the function "reveal" is called, else the placeholder is shown again. Or something like that. I am not into Java

Correct, damn i missed that just tried to inject some javascript into the website but its having none of it.

[neverminder]

In the script I found this : actions/77P98JBTRb.php

So I guess if it's in PHP we'll have to think rather than hack our way to the solution

I miss the good old days where Javascript passwords were in the main page, unencrypted....

[Tale]

Originally Posted by Ehrine

They're actually references to the field names in the form (the username field is called M6dCM2ZJxv and the password is called s069trV5XA.

Looking at the full beautified version of the .js, the first couple of functions create the 3000 or so image block lines designed to obfuscate the point you need to click to make the form appear. The main juice of it is the section

function goform(_0x5289x3) {
    $j('.container')['html']($j('.container')['html']() + _0x5289x3);
    $j('.CDyjK9kxxV')['fadeIn'](200);
    $j('input[placeholder]')['placeholder']();
    $j('.container form')['submit'](function () {
        $j['ajax']({
            url: 'actions/k5G2dyYRvN.php',
            data: 'tqhyyDitPn=' + $j('input[name=M6dCM2ZJxv]')['val']() + '&ReBwsoTXvb=' + $j('input[name=s069trV5XA]')['val'](),
            success: function (_0x5289x3) {
                if (_0x5289x3) {
                    reveal(_0x5289x3);
                } else {
                    $j('input[name=M6dCM2ZJxv]')['val']('');
                    $j('input[name=s069trV5XA]')['val']('');
                };
            }
        });
        return false;
    });
};

which I think is where the usename and password are tested, running the reveal function if correct. Thing is, I suck at javascript...

If I'm reading that right, which I'm probably not, the correct values are hidden in the php.

[Rindill the Red]

Originally Posted by thefang01

I think it's just the preset placeholders ("username"/"password")

data: 'tqhyyDitPn=' + $j('input[name=M6dCM2ZJxv]')['val']() + '&ReBwsoTXvb=' + $j('input[name=s069trV5XA]')['val'](),
            success: function (_0x5289x3) {
                if (_0x5289x3) {
                    reveal(_0x5289x3);
                } else {
                    $j('input[name=M6dCM2ZJxv]')['val']('');
                    $j('input[name=s069trV5XA]')['val']('');
                };
            }

If the real password is entered, the function "reveal" is called, else the placeholder is shown again. Or something like that. I am not into Java

I'm of the opinion that this is more important...

	    var _gaq = _gaq || [];
	    _gaq.push(['_setAccount', 'UA-6150945-37']);
	    _gaq.push(['_trackPageview']);

Could be wrong though. Is that just tracking for google analytics?

The other identifiers look like a handle rather than any sort of code.

[Raddykal]

Is this Namir in the picture?

[miraa]

FC+SG=AW

AW = Adam Weishaupt? Founder of the Illuminati.

[clone18]

if you guys want information on the original codes go back to my post on page 18. All the codes repeat themselves because of something like this: to/oi/it/

[Messy]

OK who can check ports? It should be someone hackwise.
Who dunno nothing about Fedorova and Snakeman(Forget his name lol) but know about barret?

[ACiDxCHRiST]

Originally Posted by KingNL

Updated OP, please slow down a bit guys

Actually your latest update has info that doesn't really apply. The whole 52 page document and illuminati code don't apply to how they figured out the website address.

It is as simple as taking all of the capital letters from the original message: MDDMMSBGIKOXBC

and substituting the characters from the tweets and Facebook messages, which comes out to: 13311TOWER.COM

[Necrion]

To those asking about http://sarifindustries.com/ being hacked, that happened well before the game was released. Months I think.
I'm not sure if its pertinent or not, but has anyone noticed the scribble under what appears to be Jaron Namir's picture ? It looks like:
01-0729

[dderidex]

Originally Posted by eot

What I want to know is how you guys figured out the morse code. I tried and failed

That was pretty easy. Open the .wav file in an editor, and trim out the 'noise' that was muffling the signal (anything outside of about 990hz to 1010hz). Then just maximize the volume and reduce playback speed by 50%. Easy as pie to hear, then.

[Waladil]

If not Lazarus, the only other person I could think of likely to have that desk would be Tong (Sr. or Jr.)
The password check seems to be named Harvester, their gang, Tong Jr has connections to Nicollete DuClare in DXO, and they're both rather knowledgeable about this Illuminatus things.
It was Tong Jr. that gave us "1723. The birth of Adam Weishaupt. Not a coincidence!"
That may not be directly useful in "winning" this ARG, but a poke in the right concepts?

EDIT: We never did find out why Tong Jr. needed a rescue, did we? Maybe he was "checking the ports" and got caught. The more I think about it, I'm pretty sure this is his desk. Only problem is "why is it in English" then.

[JCpie]

Originally Posted by richie98521

maybe its JC Dentons desk from the original deus ex
theres an eiffel tower and stuff about the illuminati and during the first one he does go to paris to contact a former Illuminati leader
im probly way off but still

tried the login/pass from the first game JCD and bionicman but nooope

JC Denton looking look for leads from 30-ish years ago? Not likely.

But, Debeers and Everrett do meet in Paris, (in the Eiffel Tower no less) at the end of the Icarus Effect.

[miraa]

I think the "11M13CLINIC" code is our next key clue

Does ANYONE know what we might do with this phrase?

[madcynic]

Originally Posted by initnull

TI'Ve looked at the exif header of http://cdn2.netops.eidosinteractive....13311tower.jpg

there's is a GPS entry in the file (which is completely weird since it's a CGI file )

<rdfescription rdf:about=''
xmlns:exif='http://ns.adobe.com/exif/1.0/'>
<exif:GPSLatitude>25,20.702066S</exif:GPSLatitude>
<exif:GPSLongitude>131,2.051582E</exif:GPSLongitude>
<exif:GPSVersionID>2.3.0.0</exif:GPSVersionID>
</rdfescription>

That's Ayers Rock, btw.

[Lirezh]

someone got the login and password for the belltower website ?
I've been trying a bit but no clue

[PalladiumGM]

Originally Posted by richie98521

maybe its JC Dentons desk from the original deus ex
theres an eiffel tower and stuff about the illuminati and during the first one he does go to paris to contact a former Illuminati leader
im probly way off but still

I really hope you're right and that means we're getting a remake of DX in this new engine. I might just be me, but it seems like you can't play DX:HR without wanting Eidos Montreal to:

1.) Declare DX:IW soft cannon so it won't hold them back.
2.) Keep expanding Human Revolution with the cut content and DLC until it's complete.
3.) Remake DX (keep the script, locations and story)
4.) Make whatever they want after that. DX:HR proves that they rock.

Back to the ARG: Has anyone noticed that on the graph paper book they used a capital "I" for Illuminati, but a lowercase "L" for the all caps "THINK"?

[TROOPER181st]

password must be 0451