Mr Robot S03e02 brought me here ;)

[Dingo64]

Anybody from Mr Robot here?

[rinaldi-rahmanda]

same here lol

[0xac]

I am shamefully behind on watching Mr. Robot. I will stop what I'm doing now and go watch some TV -)

…

On Thu, Oct 19, 2017 at 4:23 PM, Rinaldi A. Rahmanda < ***@***.***> wrote: same here lol — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#16 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AF-I3lAul0lwkaIYkhyr6d_rLnFg79ihks5st6-1gaJpZM4P_zh0> .

[Dingo64]

You really should, they've just made your Github popular!

https://i.imgur.com/HCk7PId.png

[Spacefish]

+1 me too :)
but they might change the content on the server where the base64 string is placed!

b.t.w. jBouaqK9R8jXxfpE6kGV ;)

[gabriele92]

Here from Mr Robot decoding too! :) Loved this easter egg!

[Dingo64]

@Spacefish I noticed the filename too. Did you decode it already?

[Spacefish]

@Dingo64 no :(, tried different rotational ciphers (ROT1-25), base64 and googled it, but did not find anything.
It might just be a random generated string by the tool which generated the QR Code image.

It´s 20 characters and number to character ratio is pretty much normal for a random 62 symbol alphabet (26 lowercase 26 uppercase and 10 digits = 62 symbols)

thought about a hash value as well, it might be a hash for a DHT based bittorent download (magnet link). But there are no hashes which use 20 characters with a 62 symbol alphabet i know of..
SHA1 is typically 160bit and written in 32 characters which contain numbers 0-9 and letters A-Z (no lower uppercase differntiation).
MD5 is written in HEX typically
SHA256 or SHA2 is way too long..

The 20 character string is too long to be a youtube video identifier.

[Dingo64]

@Spacefish I tried base64, ROT13 and ROT47. I think it might be a password. Doesn't look like base64 encoded hash because I don't think there is a hash function that returns 120 bits.

[Spacefish]

@Dingo64 updated my comment, i tried different things as well, but i don´t think it´s a hash..
the symbol set does not allow to encode 6 bit per character as there are only 62 symbols, not 64! (26 lower characters 26 upper and 10 digits = 62)

if you analyse the frequency of the different symbols in jBouaqK9R8jXxfpE6kGV
each symbol is there only once, this hints at a random string as well, but the string is only 20 characters though!

[Dingo64]

@Spacefish You are right it can't be typical base 64 but there are variations of base 64 that are fine for filenames: https://en.wikipedia.org/wiki/Base64#Filenames
So it can be base 62 but also base 64.

[Spacefish]

@Dingo64 yep that´s true! It might not contain any == padding and no _ or - as the data does not contain them and don´t need padding!
Maybe this whole string is just a login for: https://webmail.e-corp-usa.com/owa/index.php
as for example
Username: retro
Password: portal
downloads the pdf of elliots presentation 👍

[Dingo64]

@Spacefish When decoded as base62 it returns 20 E5 D1 5E 85 D5 3F A0 10 1A 58 3E 6A 2C 3C C7. This can be a 128 bit hash of something. But base62 is very rare and Elliot likes long passwords so perhaps just a password to something.

[Spacefish]

@Dingo64
When Elliot logs into his PC counting the stars it´s a 21 character password.. the string we got is 20 characters long :(

[Dingo64]

@Spacefish If he logs with 21 chars to his PC he can log with 20 chars to something else.