The companion account
A second account, the account name reversed (9CB9D65F54ED858A), posted eight posts on the main subreddit in February 2014 and a run of 122 on its own subreddit in January 2016; a seed reproduces all 122 counts, but none is read. Also the main account's 117 posts on its second subreddit, r/A858DE45.
The archive has a second account. Its name is the main account's name reversed, 9CB9D65F54ED858A, and it posted in two places: eight posts on the main subreddit, r/A858DE45F56D9BC9, in February 2014, and a run of 122 posts on its own subreddit, r/9CB9D65F54ED858A, in January 2016. Its posts are marked on their pages: the Account field in the metadata, and a badge at the top. The run is on the runs page with the same mark.
Almost none of it can be read. One of the eight is a partly recovered hand post. One is empty, and the other six are undecrypted filler. None of the 122 is decrypted, but their counts are: one seed gives every one of them, as in the main account's runs.
The eight posts on the main subreddit
The account's first post is at 17:07 UTC on 25 February 2014, the evening the operator set the account up. Three empty setup posts follow that evening, one of them the companion's, and from 20:00 UTC the account posts filler on a six-hour schedule, in the same second as the main account's own posts.
| Post | Title | Posted (UTC) | Run | N | Status | What it is |
|---|---|---|---|---|---|---|
1ywl20 | 201402250907 | 2014-02-25 17:07 | explained | A masked GUID list: 31 GUIDs, seed 804, from draw 1. 3DES-CBC, key MD5(name+title), first block lost (the first GUID is missing its first 8 characters). | ||
1ywlv8 | 201402250915 | 2014-02-25 17:15 | Account setup, 2014-02-25 | 0 | inferred | Account-setup test post with an empty list (N = 0). |
1yx3zk | 201402252000 | 2014-02-25 20:00 | feb2014c | 9 | inferred | Undecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 9. The key is not recovered. |
1yy76t | 201402260200 | 2014-02-26 02:00 | feb2014c | 21 | inferred | Undecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 21. The key is not recovered. |
1yz2fb | 201402260800 | 2014-02-26 08:00 | feb2014c | 8 | inferred | Undecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 8. The key is not recovered. |
1yzlj3 | 201402261359 | 2014-02-26 14:00 | feb2014c | 0 | inferred | Empty list (N = 0): a header-only body, posted on the companion account's schedule. |
1z0n5k | 201402261959 | 2014-02-26 20:00 | feb2014c | 15 | inferred | Undecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 15. The key is not recovered. |
1z1q0v | 201402270159 | 2014-02-27 01:59 | feb2014c | 12 | inferred | Undecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 12. The key is not recovered. |
1ywl20 is the only post with content. It is a hand post in the old upper-case format, 3DES-CBC
with the key MD5 of the account name and the title, and its first block is lost. It opens a masked GUID list, seed 804.
The six filler posts follow the length law, so their counts come from their lengths alone. Taken as one count stream shared by both accounts they do not fit, and no separate stream for each account can be found. The runs page lists them as a group of nine posts from two accounts.
The run on the companion subreddit
Between 19 and 24 January 2016 the account posted on its own subreddit, once an hour. Each post came about two minutes after a post on the main subreddit, and its titles are on a UTC+2 clock. The run page lists all 122 posts, each with its own page and the main-subreddit post it pairs with.
new Random(546395639)The run, post by post: 122 posts, each with its own page →
Here the author field on Reddit does show the companion account. On the main subreddit Reddit shows [deleted], so the
attribution of those eight posts rests on the setup night and the timing, not on the author field.
The bodies are hex in 32-character blocks with a 16-character tail: 64N+16 characters, the same length law as the main subreddit's filler. They show no plaintext structure, no repeated blocks, and byte statistics that look like ciphertext. Keys built from the account names, the companion name, each post's title and its timestamp fields, under the cipher and key-derivation families the main subreddit's posts use, open none of them. Two large families are not tested yet: the random-salt derivation and the GPU key sweeps. The operator has said publicly that the filler is encrypted with a random salted key. If that is so, these bodies may stay closed.
The counts
The counts come from new Random(546395639), one Next(10,35) per post, and the seed reproduces all 122 of them, at
draws 1 to 122. Draw 0 is never posted. That is the startup draw every main-account run from 2013 on also skips, so the
companion's app behaved like the main one from its first call.
The seed puts it on the same boot as run 73, the main subreddit's run at the time. Run 73's seed is 546,388,634, 7,005 ms smaller, so the two app instances were started seven seconds apart and ran side by side with the same count rule and the same hourly schedule. They differ in three things: the companion posts two minutes after its main post, its titles are on UTC+2 where run 73's are on UTC−5, and it stopped after draw 122, on 24 January, while run 73 went on to 25 January. Whether the companion's length was set at launch or the instance was closed early can't be told from the posts; across all the seeded runs, the post counts show no round numbers or other sign of a quota.
The other subreddit, r/A858DE45
The main account also posted to a second subreddit of its own, r/A858DE45. The subreddit was wiped in January and again in May 2014, and none of the archives this site is built from holds it. Wayback Machine captures of its pages list 117 posts by the main account, from 21 February 2013 to 27 May 2014. It was a separate instance of the program, not a mirror of the main subreddit: on 21 and 22 February 2013 it posted every five minutes while the main subreddit was silent; in August 2013 it posted every three hours at :59 while the main subreddit posted at :06; and from 26 September to 8 October 2013 it posted twice a day. That last stretch ends on 8 October 2013, with the last run in the old format on the main subreddit. In May 2014 it posted hourly.
Seven bodies survive in the captures. The six from 2013 decrypt with the main subreddit's key of the time, MD5 of the name
and the title, to ordinary masked GUID lists of 32 to 60 GUIDs, each with its own mask seed: the same filler as the main
subreddit. The seventh, from May 2014, has the post-cutover 64N+16 format and does not decrypt, like every main post of that
time. A short value once quoted from this subreddit, 71845121b5734280, is the last block of one of these posts, not a
key of its own.
Each post has a page of its own, with the six decryptions worked through like any post on the main subreddit, and links to the Wayback captures that list it. They are kept out of the A858 counts and post listings.
All 117 posts on r/A858DE45, each linked to its page
| Post | Title | Posted (UTC) | Title clock | N | Status | Body |
|---|---|---|---|---|---|---|
18ykww | 201302210824 | 2013-02-21 16:24 | UTC−8 | unsolved | missing | |
18ynva | 201302210904 | 2013-02-21 17:04 | UTC−8 | unsolved | missing | |
18z1pn | 201302211204 | 2013-02-21 20:04 | UTC−8 | unsolved | missing | |
18z243 | 201302211209 | 2013-02-21 20:09 | UTC−8 | unsolved | missing | |
18z2hb | 201302211214 | 2013-02-21 20:14 | UTC−8 | unsolved | missing | |
18z2w1 | 201302211219 | 2013-02-21 20:19 | UTC−8 | unsolved | missing | |
18z3mn | 201302211229 | 2013-02-21 20:29 | UTC−8 | unsolved | missing | |
18z5a4 | 201302211249 | 2013-02-21 20:49 | UTC−8 | unsolved | missing | |
18z639 | 201302211259 | 2013-02-21 20:59 | UTC−8 | unsolved | missing | |
18z7bj | 201302211314 | 2013-02-21 21:14 | UTC−8 | unsolved | missing | |
18ziti | 201302211539 | 2013-02-21 23:39 | UTC−8 | unsolved | missing | |
18zp73 | 201302211704 | 2013-02-22 01:04 | UTC−8 | unsolved | missing | |
18zrrt | 201302211739 | 2013-02-22 01:39 | UTC−8 | unsolved | missing | |
18zs3b | 201302211744 | 2013-02-22 01:44 | UTC−8 | unsolved | missing | |
18ztk3 | 201302211804 | 2013-02-22 02:04 | UTC−8 | unsolved | missing | |
18ztyk | 201302211809 | 2013-02-22 02:09 | UTC−8 | unsolved | missing | |
18zup8 | 201302211819 | 2013-02-22 02:19 | UTC−8 | unsolved | missing | |
18zw6k | 201302211839 | 2013-02-22 02:39 | UTC−8 | unsolved | missing | |
18zwjv | 201302211844 | 2013-02-22 02:44 | UTC−8 | unsolved | missing | |
18zwxi | 201302211849 | 2013-02-22 02:49 | UTC−8 | unsolved | missing | |
1905gt | 201302212049 | 2013-02-22 04:49 | UTC−8 | unsolved | missing | |
1905sy | 201302212054 | 2013-02-22 04:54 | UTC−8 | unsolved | missing | |
19063w | 201302212059 | 2013-02-22 04:59 | UTC−8 | unsolved | missing | |
1906j0 | 201302212104 | 2013-02-22 05:04 | UTC−8 | unsolved | missing | |
1906vu | 201302212109 | 2013-02-22 05:09 | UTC−8 | 44 | explained | decrypted |
19076a | 201302212114 | 2013-02-22 05:14 | UTC−8 | unsolved | missing | |
1bmu9k | 201304032223 | 2013-04-04 02:23 | UTC−4 | 60 | explained | decrypted |
1io1r8 | 201307192028 | 2013-07-20 00:29 | UTC−4 | 52 | explained | decrypted |
1jvfhl | 201308070459 | 2013-08-07 08:59 | UTC−4 | unsolved | missing | |
1jvx86 | 201308071059 | 2013-08-07 14:59 | UTC−4 | unsolved | missing | |
1jwbuv | 201308071359 | 2013-08-07 17:59 | UTC−4 | unsolved | missing | |
1jwrkm | 201308071659 | 2013-08-07 20:59 | UTC−4 | unsolved | missing | |
1jx5rb | 201308071959 | 2013-08-07 23:59 | UTC−4 | unsolved | missing | |
1jxj27 | 201308072259 | 2013-08-08 02:59 | UTC−4 | unsolved | missing | |
1jxuix | 201308080159 | 2013-08-08 05:59 | UTC−4 | unsolved | missing | |
1jy1us | 201308080459 | 2013-08-08 08:59 | UTC−4 | unsolved | missing | |
1jy8bo | 201308080759 | 2013-08-08 11:59 | UTC−4 | unsolved | missing | |
1jyips | 201308081059 | 2013-08-08 14:59 | UTC−4 | unsolved | missing | |
1jyxd3 | 201308081359 | 2013-08-08 17:59 | UTC−4 | unsolved | missing | |
1jzcsx | 201308081659 | 2013-08-08 20:59 | UTC−4 | unsolved | missing | |
1k03lo | 201308082259 | 2013-08-09 02:59 | UTC−4 | unsolved | missing | |
1k0ef3 | 201308090159 | 2013-08-09 05:59 | UTC−4 | unsolved | missing | |
1k0lf0 | 201308090459 | 2013-08-09 08:59 | UTC−4 | unsolved | missing | |
1k0r8a | 201308090759 | 2013-08-09 11:59 | UTC−4 | unsolved | missing | |
1k11gd | 201308091059 | 2013-08-09 14:59 | UTC−4 | unsolved | missing | |
1k1fd0 | 201308091359 | 2013-08-09 17:59 | UTC−4 | unsolved | missing | |
1k1tqr | 201308091659 | 2013-08-09 20:59 | UTC−4 | unsolved | missing | |
1k26ow | 201308091959 | 2013-08-09 23:59 | UTC−4 | unsolved | missing | |
1k2htm | 201308092259 | 2013-08-10 02:59 | UTC−4 | unsolved | missing | |
1k2rpi | 201308100159 | 2013-08-10 05:59 | UTC−4 | unsolved | missing | |
1k2y56 | 201308100459 | 2013-08-10 08:59 | UTC−4 | unsolved | missing | |
1k334d | 201308100759 | 2013-08-10 11:59 | UTC−4 | unsolved | missing | |
1k3a4v | 201308101059 | 2013-08-10 14:59 | UTC−4 | unsolved | missing | |
1k3kre | 201308101359 | 2013-08-10 17:59 | UTC−4 | unsolved | missing | |
1k3wfy | 201308101659 | 2013-08-10 20:59 | UTC−4 | unsolved | missing | |
1k47s4 | 201308101959 | 2013-08-10 23:59 | UTC−4 | unsolved | missing | |
1k4i4a | 201308102259 | 2013-08-11 02:59 | UTC−4 | unsolved | missing | |
1k4rel | 201308110159 | 2013-08-11 05:59 | UTC−4 | unsolved | missing | |
1k4xgy | 201308110459 | 2013-08-11 08:59 | UTC−4 | unsolved | missing | |
1k5267 | 201308110759 | 2013-08-11 11:59 | UTC−4 | unsolved | missing | |
1k59h1 | 201308111059 | 2013-08-11 14:59 | UTC−4 | unsolved | missing | |
1k5wxz | 201308111659 | 2013-08-11 20:59 | UTC−4 | unsolved | missing | |
1k69d2 | 201308111959 | 2013-08-11 23:59 | UTC−4 | unsolved | missing | |
1k6lg1 | 201308112259 | 2013-08-12 02:59 | UTC−4 | unsolved | missing | |
1k73ul | 201308120459 | 2013-08-12 08:59 | UTC−4 | unsolved | missing | |
1k7a00 | 201308120759 | 2013-08-12 11:59 | UTC−4 | unsolved | missing | |
1k7jzy | 201308121059 | 2013-08-12 14:59 | UTC−4 | unsolved | missing | |
1k7xvq | 201308121359 | 2013-08-12 17:59 | UTC−4 | unsolved | missing | |
1k8cvp | 201308121659 | 2013-08-12 20:59 | UTC−4 | unsolved | missing | |
1k8rdd | 201308121959 | 2013-08-12 23:59 | UTC−4 | unsolved | missing | |
1k94ol | 201308122259 | 2013-08-13 02:59 | UTC−4 | unsolved | missing | |
1k9gcf | 201308130159 | 2013-08-13 05:59 | UTC−4 | unsolved | missing | |
1k9np6 | 201308130459 | 2013-08-13 08:59 | UTC−4 | unsolved | missing | |
1k9tyk | 201308130759 | 2013-08-13 11:59 | UTC−4 | unsolved | missing | |
1ka48p | 201308131059 | 2013-08-13 14:59 | UTC−4 | unsolved | missing | |
1kaixv | 201308131359 | 2013-08-13 17:59 | UTC−4 | unsolved | missing | |
1kay9c | 201308131659 | 2013-08-13 20:59 | UTC−4 | unsolved | missing | |
1kbc72 | 201308131959 | 2013-08-13 23:59 | UTC−4 | 36 | explained | decrypted |
1m6bv4 | 201309111659 | 2013-09-11 13:59 | UTC+3 | 44 | explained | decrypted |
1n64bm | 201309261416 | 2013-09-26 11:16 | UTC+3 | unsolved | missing | |
1n7lr2 | 201309270216 | 2013-09-26 23:16 | UTC+3 | unsolved | missing | |
1n8p53 | 201309271416 | 2013-09-27 11:16 | UTC+3 | unsolved | missing | |
1na4ca | 201309280216 | 2013-09-27 23:16 | UTC+3 | unsolved | missing | |
1nb1s4 | 201309281416 | 2013-09-28 11:16 | UTC+3 | unsolved | missing | |
1nc9n7 | 201309290216 | 2013-09-28 23:16 | UTC+3 | unsolved | missing | |
1ndalj | 201309291416 | 2013-09-29 11:16 | UTC+3 | unsolved | missing | |
1nejmg | 201309300216 | 2013-09-29 23:16 | UTC+3 | unsolved | missing | |
1nflfv | 201309301416 | 2013-09-30 11:16 | UTC+3 | unsolved | missing | |
1nh13b | 201310010216 | 2013-09-30 23:16 | UTC+3 | unsolved | missing | |
1ni5ls | 201310011416 | 2013-10-01 11:16 | UTC+3 | unsolved | missing | |
1njntp | 201310020216 | 2013-10-01 23:16 | UTC+3 | unsolved | missing | |
1nkqly | 201310021416 | 2013-10-02 11:16 | UTC+3 | unsolved | missing | |
1nm89z | 201310030216 | 2013-10-02 23:16 | UTC+3 | unsolved | missing | |
1nnb01 | 201310031416 | 2013-10-03 11:16 | UTC+3 | unsolved | missing | |
1nosds | 201310040216 | 2013-10-03 23:16 | UTC+3 | unsolved | missing | |
1nptr5 | 201310041416 | 2013-10-04 11:16 | UTC+3 | unsolved | missing | |
1nr73s | 201310050216 | 2013-10-04 23:17 | UTC+3 | unsolved | missing | |
1ns3nf | 201310051416 | 2013-10-05 11:16 | UTC+3 | unsolved | missing | |
1nt8ea | 201310060216 | 2013-10-05 23:16 | UTC+3 | unsolved | missing | |
1nu52x | 201310061416 | 2013-10-06 11:16 | UTC+3 | unsolved | missing | |
1nvegv | 201310070216 | 2013-10-06 23:16 | UTC+3 | unsolved | missing | |
1nwinl | 201310071416 | 2013-10-07 11:16 | UTC+3 | unsolved | missing | |
1nxzq5 | 201310080216 | 2013-10-07 23:16 | UTC+3 | unsolved | missing | |
1nz70b | 201310081424 | 2013-10-08 11:24 | UTC+3 | 32 | explained | decrypted |
26ghj5 | 201405252033 | 2014-05-25 17:33 | UTC+3 | unsolved | missing | |
26liu6 | 201405271433 | 2014-05-27 11:33 | UTC+3 | unsolved | missing | |
26lmij | 201405271533 | 2014-05-27 12:33 | UTC+3 | unsolved | missing | |
26lqvo | 201405271633 | 2014-05-27 13:33 | UTC+3 | unsolved | missing | |
26lw4u | 201405271733 | 2014-05-27 14:33 | UTC+3 | unsolved | missing | |
26m1v0 | 201405271833 | 2014-05-27 15:33 | UTC+3 | unsolved | missing | |
26m7tk | 201405271933 | 2014-05-27 16:33 | UTC+3 | unsolved | missing | |
26mdwu | 201405272033 | 2014-05-27 17:33 | UTC+3 | unsolved | missing | |
26mk35 | 201405272133 | 2014-05-27 18:33 | UTC+3 | unsolved | missing | |
26mqem | 201405272233 | 2014-05-27 19:33 | UTC+3 | unsolved | missing | |
26mwoq | 201405272333 | 2014-05-27 20:33 | UTC+3 | unsolved | missing | |
26n2um | 201405280033 | 2014-05-27 21:33 | UTC+3 | unsolved | missing | |
26n8ve | 201405280133 | 2014-05-27 22:33 | UTC+3 | 26 | unsolved | encrypted |
What is not in the archive
- Fifteen comments on companion-subreddit posts survive. Five of them are on two May 2014 posts whose bodies were never retained.
- 110 of the 117 posts on r/A858DE45 are known by their titles only.