A858DE45F56D9BC9 archive

The companion account

A second account, the account name reversed (9CB9D65F54ED858A), posted eight posts on the main subreddit in February 2014 and a run of 122 on its own subreddit in January 2016; a seed reproduces all 122 counts, but none is read. Also the main account's 117 posts on its second subreddit, r/A858DE45.

The archive has a second account. Its name is the main account's name reversed, 9CB9D65F54ED858A, and it posted in two places: eight posts on the main subreddit, r/A858DE45F56D9BC9, in February 2014, and a run of 122 posts on its own subreddit, r/9CB9D65F54ED858A, in January 2016. Its posts are marked on their pages: the Account field in the metadata, and a badge at the top. The run is on the runs page with the same mark.

Almost none of it can be read. One of the eight is a partly recovered hand post. One is empty, and the other six are undecrypted filler. None of the 122 is decrypted, but their counts are: one seed gives every one of them, as in the main account's runs.

The eight posts on the main subreddit

The account's first post is at 17:07 UTC on 25 February 2014, the evening the operator set the account up. Three empty setup posts follow that evening, one of them the companion's, and from 20:00 UTC the account posts filler on a six-hour schedule, in the same second as the main account's own posts.

PostTitlePosted (UTC)RunNStatusWhat it is
1ywl202014022509072014-02-25 17:07explainedA masked GUID list: 31 GUIDs, seed 804, from draw 1. 3DES-CBC, key MD5(name+title), first block lost (the first GUID is missing its first 8 characters).
1ywlv82014022509152014-02-25 17:15Account setup, 2014-02-250inferredAccount-setup test post with an empty list (N = 0).
1yx3zk2014022520002014-02-25 20:00feb2014c9inferredUndecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 9. The key is not recovered.
1yy76t2014022602002014-02-26 02:00feb2014c21inferredUndecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 21. The key is not recovered.
1yz2fb2014022608002014-02-26 08:00feb2014c8inferredUndecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 8. The key is not recovered.
1yzlj32014022613592014-02-26 14:00feb2014c0inferredEmpty list (N = 0): a header-only body, posted on the companion account's schedule.
1z0n5k2014022619592014-02-26 20:00feb2014c15inferredUndecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 15. The key is not recovered.
1z1q0v2014022701592014-02-27 01:59feb2014c12inferredUndecrypted filler on the companion account. Its length fits the 64N+16 law, so N = 12. The key is not recovered.

1ywl20 is the only post with content. It is a hand post in the old upper-case format, 3DES-CBC with the key MD5 of the account name and the title, and its first block is lost. It opens a masked GUID list, seed 804.

The six filler posts follow the length law, so their counts come from their lengths alone. Taken as one count stream shared by both accounts they do not fit, and no separate stream for each account can be found. The runs page lists them as a group of nine posts from two accounts.

The run on the companion subreddit

Between 19 and 24 January 2016 the account posted on its own subreddit, once an hour. Each post came about two minutes after a post on the main subreddit, and its titles are on a UTC+2 clock. The run page lists all 122 posts, each with its own page and the main-subreddit post it pairs with.

122posts on r/9CB9D65F54ED858A, one an hour
19–24 Jan 2016posting window (UTC)
10–34N per post, from the 64N+16 length law
122 of 122counts reproduced by new Random(546395639)
122 of 122posts 1–2 minutes after a post on the main subreddit

The run, post by post: 122 posts, each with its own page →

Here the author field on Reddit does show the companion account. On the main subreddit Reddit shows [deleted], so the attribution of those eight posts rests on the setup night and the timing, not on the author field.

The bodies are hex in 32-character blocks with a 16-character tail: 64N+16 characters, the same length law as the main subreddit's filler. They show no plaintext structure, no repeated blocks, and byte statistics that look like ciphertext. Keys built from the account names, the companion name, each post's title and its timestamp fields, under the cipher and key-derivation families the main subreddit's posts use, open none of them. Two large families are not tested yet: the random-salt derivation and the GPU key sweeps. The operator has said publicly that the filler is encrypted with a random salted key. If that is so, these bodies may stay closed.

The counts

The counts come from new Random(546395639), one Next(10,35) per post, and the seed reproduces all 122 of them, at draws 1 to 122. Draw 0 is never posted. That is the startup draw every main-account run from 2013 on also skips, so the companion's app behaved like the main one from its first call.

The seed puts it on the same boot as run 73, the main subreddit's run at the time. Run 73's seed is 546,388,634, 7,005 ms smaller, so the two app instances were started seven seconds apart and ran side by side with the same count rule and the same hourly schedule. They differ in three things: the companion posts two minutes after its main post, its titles are on UTC+2 where run 73's are on UTC−5, and it stopped after draw 122, on 24 January, while run 73 went on to 25 January. Whether the companion's length was set at launch or the instance was closed early can't be told from the posts; across all the seeded runs, the post counts show no round numbers or other sign of a quota.

The other subreddit, r/A858DE45

The main account also posted to a second subreddit of its own, r/A858DE45. The subreddit was wiped in January and again in May 2014, and none of the archives this site is built from holds it. Wayback Machine captures of its pages list 117 posts by the main account, from 21 February 2013 to 27 May 2014. It was a separate instance of the program, not a mirror of the main subreddit: on 21 and 22 February 2013 it posted every five minutes while the main subreddit was silent; in August 2013 it posted every three hours at :59 while the main subreddit posted at :06; and from 26 September to 8 October 2013 it posted twice a day. That last stretch ends on 8 October 2013, with the last run in the old format on the main subreddit. In May 2014 it posted hourly.

Seven bodies survive in the captures. The six from 2013 decrypt with the main subreddit's key of the time, MD5 of the name and the title, to ordinary masked GUID lists of 32 to 60 GUIDs, each with its own mask seed: the same filler as the main subreddit. The seventh, from May 2014, has the post-cutover 64N+16 format and does not decrypt, like every main post of that time. A short value once quoted from this subreddit, 71845121b5734280, is the last block of one of these posts, not a key of its own.

Each post has a page of its own, with the six decryptions worked through like any post on the main subreddit, and links to the Wayback captures that list it. They are kept out of the A858 counts and post listings.

117posts on r/A858DE45 in Wayback captures
Feb 2013 – May 2014posting window
7with a body; the other 110 are known by their titles only
6 of 7decrypted: masked GUID lists, every mask seed re-checked
All 117 posts on r/A858DE45, each linked to its page
PostTitlePosted (UTC)Title clockNStatusBody
18ykww2013022108242013-02-21 16:24UTC−8unsolvedmissing
18ynva2013022109042013-02-21 17:04UTC−8unsolvedmissing
18z1pn2013022112042013-02-21 20:04UTC−8unsolvedmissing
18z2432013022112092013-02-21 20:09UTC−8unsolvedmissing
18z2hb2013022112142013-02-21 20:14UTC−8unsolvedmissing
18z2w12013022112192013-02-21 20:19UTC−8unsolvedmissing
18z3mn2013022112292013-02-21 20:29UTC−8unsolvedmissing
18z5a42013022112492013-02-21 20:49UTC−8unsolvedmissing
18z6392013022112592013-02-21 20:59UTC−8unsolvedmissing
18z7bj2013022113142013-02-21 21:14UTC−8unsolvedmissing
18ziti2013022115392013-02-21 23:39UTC−8unsolvedmissing
18zp732013022117042013-02-22 01:04UTC−8unsolvedmissing
18zrrt2013022117392013-02-22 01:39UTC−8unsolvedmissing
18zs3b2013022117442013-02-22 01:44UTC−8unsolvedmissing
18ztk32013022118042013-02-22 02:04UTC−8unsolvedmissing
18ztyk2013022118092013-02-22 02:09UTC−8unsolvedmissing
18zup82013022118192013-02-22 02:19UTC−8unsolvedmissing
18zw6k2013022118392013-02-22 02:39UTC−8unsolvedmissing
18zwjv2013022118442013-02-22 02:44UTC−8unsolvedmissing
18zwxi2013022118492013-02-22 02:49UTC−8unsolvedmissing
1905gt2013022120492013-02-22 04:49UTC−8unsolvedmissing
1905sy2013022120542013-02-22 04:54UTC−8unsolvedmissing
19063w2013022120592013-02-22 04:59UTC−8unsolvedmissing
1906j02013022121042013-02-22 05:04UTC−8unsolvedmissing
1906vu2013022121092013-02-22 05:09UTC−844explaineddecrypted
19076a2013022121142013-02-22 05:14UTC−8unsolvedmissing
1bmu9k2013040322232013-04-04 02:23UTC−460explaineddecrypted
1io1r82013071920282013-07-20 00:29UTC−452explaineddecrypted
1jvfhl2013080704592013-08-07 08:59UTC−4unsolvedmissing
1jvx862013080710592013-08-07 14:59UTC−4unsolvedmissing
1jwbuv2013080713592013-08-07 17:59UTC−4unsolvedmissing
1jwrkm2013080716592013-08-07 20:59UTC−4unsolvedmissing
1jx5rb2013080719592013-08-07 23:59UTC−4unsolvedmissing
1jxj272013080722592013-08-08 02:59UTC−4unsolvedmissing
1jxuix2013080801592013-08-08 05:59UTC−4unsolvedmissing
1jy1us2013080804592013-08-08 08:59UTC−4unsolvedmissing
1jy8bo2013080807592013-08-08 11:59UTC−4unsolvedmissing
1jyips2013080810592013-08-08 14:59UTC−4unsolvedmissing
1jyxd32013080813592013-08-08 17:59UTC−4unsolvedmissing
1jzcsx2013080816592013-08-08 20:59UTC−4unsolvedmissing
1k03lo2013080822592013-08-09 02:59UTC−4unsolvedmissing
1k0ef32013080901592013-08-09 05:59UTC−4unsolvedmissing
1k0lf02013080904592013-08-09 08:59UTC−4unsolvedmissing
1k0r8a2013080907592013-08-09 11:59UTC−4unsolvedmissing
1k11gd2013080910592013-08-09 14:59UTC−4unsolvedmissing
1k1fd02013080913592013-08-09 17:59UTC−4unsolvedmissing
1k1tqr2013080916592013-08-09 20:59UTC−4unsolvedmissing
1k26ow2013080919592013-08-09 23:59UTC−4unsolvedmissing
1k2htm2013080922592013-08-10 02:59UTC−4unsolvedmissing
1k2rpi2013081001592013-08-10 05:59UTC−4unsolvedmissing
1k2y562013081004592013-08-10 08:59UTC−4unsolvedmissing
1k334d2013081007592013-08-10 11:59UTC−4unsolvedmissing
1k3a4v2013081010592013-08-10 14:59UTC−4unsolvedmissing
1k3kre2013081013592013-08-10 17:59UTC−4unsolvedmissing
1k3wfy2013081016592013-08-10 20:59UTC−4unsolvedmissing
1k47s42013081019592013-08-10 23:59UTC−4unsolvedmissing
1k4i4a2013081022592013-08-11 02:59UTC−4unsolvedmissing
1k4rel2013081101592013-08-11 05:59UTC−4unsolvedmissing
1k4xgy2013081104592013-08-11 08:59UTC−4unsolvedmissing
1k52672013081107592013-08-11 11:59UTC−4unsolvedmissing
1k59h12013081110592013-08-11 14:59UTC−4unsolvedmissing
1k5wxz2013081116592013-08-11 20:59UTC−4unsolvedmissing
1k69d22013081119592013-08-11 23:59UTC−4unsolvedmissing
1k6lg12013081122592013-08-12 02:59UTC−4unsolvedmissing
1k73ul2013081204592013-08-12 08:59UTC−4unsolvedmissing
1k7a002013081207592013-08-12 11:59UTC−4unsolvedmissing
1k7jzy2013081210592013-08-12 14:59UTC−4unsolvedmissing
1k7xvq2013081213592013-08-12 17:59UTC−4unsolvedmissing
1k8cvp2013081216592013-08-12 20:59UTC−4unsolvedmissing
1k8rdd2013081219592013-08-12 23:59UTC−4unsolvedmissing
1k94ol2013081222592013-08-13 02:59UTC−4unsolvedmissing
1k9gcf2013081301592013-08-13 05:59UTC−4unsolvedmissing
1k9np62013081304592013-08-13 08:59UTC−4unsolvedmissing
1k9tyk2013081307592013-08-13 11:59UTC−4unsolvedmissing
1ka48p2013081310592013-08-13 14:59UTC−4unsolvedmissing
1kaixv2013081313592013-08-13 17:59UTC−4unsolvedmissing
1kay9c2013081316592013-08-13 20:59UTC−4unsolvedmissing
1kbc722013081319592013-08-13 23:59UTC−436explaineddecrypted
1m6bv42013091116592013-09-11 13:59UTC+344explaineddecrypted
1n64bm2013092614162013-09-26 11:16UTC+3unsolvedmissing
1n7lr22013092702162013-09-26 23:16UTC+3unsolvedmissing
1n8p532013092714162013-09-27 11:16UTC+3unsolvedmissing
1na4ca2013092802162013-09-27 23:16UTC+3unsolvedmissing
1nb1s42013092814162013-09-28 11:16UTC+3unsolvedmissing
1nc9n72013092902162013-09-28 23:16UTC+3unsolvedmissing
1ndalj2013092914162013-09-29 11:16UTC+3unsolvedmissing
1nejmg2013093002162013-09-29 23:16UTC+3unsolvedmissing
1nflfv2013093014162013-09-30 11:16UTC+3unsolvedmissing
1nh13b2013100102162013-09-30 23:16UTC+3unsolvedmissing
1ni5ls2013100114162013-10-01 11:16UTC+3unsolvedmissing
1njntp2013100202162013-10-01 23:16UTC+3unsolvedmissing
1nkqly2013100214162013-10-02 11:16UTC+3unsolvedmissing
1nm89z2013100302162013-10-02 23:16UTC+3unsolvedmissing
1nnb012013100314162013-10-03 11:16UTC+3unsolvedmissing
1nosds2013100402162013-10-03 23:16UTC+3unsolvedmissing
1nptr52013100414162013-10-04 11:16UTC+3unsolvedmissing
1nr73s2013100502162013-10-04 23:17UTC+3unsolvedmissing
1ns3nf2013100514162013-10-05 11:16UTC+3unsolvedmissing
1nt8ea2013100602162013-10-05 23:16UTC+3unsolvedmissing
1nu52x2013100614162013-10-06 11:16UTC+3unsolvedmissing
1nvegv2013100702162013-10-06 23:16UTC+3unsolvedmissing
1nwinl2013100714162013-10-07 11:16UTC+3unsolvedmissing
1nxzq52013100802162013-10-07 23:16UTC+3unsolvedmissing
1nz70b2013100814242013-10-08 11:24UTC+332explaineddecrypted
26ghj52014052520332014-05-25 17:33UTC+3unsolvedmissing
26liu62014052714332014-05-27 11:33UTC+3unsolvedmissing
26lmij2014052715332014-05-27 12:33UTC+3unsolvedmissing
26lqvo2014052716332014-05-27 13:33UTC+3unsolvedmissing
26lw4u2014052717332014-05-27 14:33UTC+3unsolvedmissing
26m1v02014052718332014-05-27 15:33UTC+3unsolvedmissing
26m7tk2014052719332014-05-27 16:33UTC+3unsolvedmissing
26mdwu2014052720332014-05-27 17:33UTC+3unsolvedmissing
26mk352014052721332014-05-27 18:33UTC+3unsolvedmissing
26mqem2014052722332014-05-27 19:33UTC+3unsolvedmissing
26mwoq2014052723332014-05-27 20:33UTC+3unsolvedmissing
26n2um2014052800332014-05-27 21:33UTC+3unsolvedmissing
26n8ve2014052801332014-05-27 22:33UTC+326unsolvedencrypted

What is not in the archive