{
 "id": "12yvg0",
 "title": "201211101158",
 "title_time": "2012-11-10T11:58",
 "author": "[deleted]",
 "account": "A858DE45F56D9BC9",
 "subreddit": "A858DE45F56D9BC9",
 "created_utc": "2012-11-10T16:58:13Z",
 "permalink": "https://www.reddit.com/r/A858DE45F56D9BC9/comments/12yvg0/201211101158/",
 "arctic_shift": "https://arctic-shift.photon-reddit.com/api/posts/ids?ids=12yvg0",
 "sources": [
  "community-archive",
  "arctic-shift"
 ],
 "body": "1A0D30234677DA4A 59DD15F30A9E9004 83D640CA53BA577F 165CE2BE3DA55125 0BD66DF009A6AE05 6DAF24475A69C612 ",
 "body_source": "community-archive",
 "body_other_version": null,
 "body_hex_chars": 96,
 "bytes": 48,
 "score": 11,
 "num_comments": 0,
 "category": {
  "code": "S",
  "label": "S solved 3DES → text"
 },
 "kind": "manual",
 "encryption": "decrypted",
 "status": "solved",
 "summary": "The bot's restart time, 201212031123 (23 days later), with the MD5 from the jgxlk GIF. 3DES, key MD5(name).",
 "content_type": [
  "Operational notes"
 ],
 "cipher": {
  "recipe": "MD5(name) ECB",
  "algorithm": "3DES-EDE2 (two-key Triple DES)",
  "mode": "ECB",
  "padding": "PKCS7",
  "key_derivation": "MD5(password)",
  "password_recipe": "name",
  "password": "A858DE45F56D9BC9",
  "key_hex": "34a14a42e98ff96095af56604e290cae",
  "raw": "201212031123\r\n34A14A42E98FF96095AF56604E290CAE"
 },
 "plaintext": "201212031123\r\n34A14A42E98FF96095AF56604E290CAE",
 "word_layer": null,
 "credit": {
  "kind": "explanation",
  "what": "The decrypted time 201212031123 is when the bot restarted, 23 days later (11:23 Pacific, the first post after the silence)."
 },
 "decoded_layers": null,
 "guids": null,
 "count_from_length": null,
 "run": null,
 "known_solution": [
  {
   "Method": "3DES-ECB, key MD5(name)",
   "Result": "'201212031123' plus the GIF's hidden MD5",
   "Explanation": "Explained: 201212031123 is the bot's restart time in Pacific time, 23 days later",
   "Re-checked": "3DES MD5(name) -> forward reference"
  }
 ],
 "tags": [
  "automated (decryptable)",
  "2012",
  "Solved special post",
  "manual",
  "key: name",
  "operational notes",
  "found by this project"
 ],
 "title_zone_hours": -5,
 "title_zone": "UTC−5",
 "writeup": {
  "title": null,
  "markdown": "I have been going through the timing of the posts, and I believe I found what `12yvg0` (title 201211101158) refers to. It was originally found [here](http://www.reddit.com/r/A858DE45F56D9BC9/comments/12yvg0/201211101158/):\n\n    1A0D30234677DA4A 59DD15F30A9E9004 83D640CA53BA577F 165CE2BE3DA55125 0BD66DF009A6AE05 6DAF24475A69C612\n\nThis one has been decrypted before (see the [wiki page](https://www.reddit.com/r/Solving_A858/wiki/201211101158)). It is des-ede-ecb with the usual key `MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae`, and it gives:\n\n    201212031123\n    34A14A42E98FF96095AF56604E290CAE\n\nThe second line is the MD5 of the name, the same value that was hidden in the 201108121018 GIF and shown in the sidebar back in July 2011. The wiki notes that there is no post titled 201212031123, so the first line has been unexplained so far.\n\nIt is not a post title, it is a time: **2012-12-03 11:23, US Pacific time**. Here is what happened around it:\n\n- 2012-11-10 16:58 UTC: `12yvg0` is posted by hand (different length from the regular posts, as /u/fragglet noticed at the time).\n- The bot posts twice more (19:00 and 23:00 UTC) and then goes silent, and the sub goes private the next morning.\n- 2012-12-03 19:23:00 UTC = **11:23:00 PST**: the first post after 23 days of silence, [`147qlw`](http://www.reddit.com/r/A858DE45F56D9BC9/comments/147qlw/201212031422/) (/u/fragglet commented \"Welcome back.\" half an hour later).\n\nSo the message announced, three weeks in advance and to the minute, when the bot would start posting again, in the operator's own time zone. Note that the post titles themselves were not in Pacific time at that point (147qlw is titled 201212031422), so the time in the message was typed in a different clock from the one the bot used for titles.\n\nMore support that this is a restart and not just a coincidence: the regular posts from then on (every 33 minutes) come from a freshly started program. The number of GUIDs in each post is drawn from a .NET `System.Random` that is created once when the program starts, and `147qlw` is the very first draw of a new instance. I checked all four decrypted messages that contain dates or times (201210080311, 201210121742, 201211101158 and 201307231045) against every post and every restart of the bot, in every time zone offset. This is the only one that matches anything, and the chance of a random restart landing within a few minutes of it in Pacific time is roughly 1 in 5,000.\n\nAll the steps as one command\n\n    echo '1A0D30234677DA4A 59DD15F30A9E9004 83D640CA53BA577F 165CE2BE3DA55125 0BD66DF009A6AE05 6DAF24475A69C612' \\\n      | xxd -r -p \\\n      | openssl enc -d -des-ede-ecb -K \"$(printf 'A858DE45F56D9BC9' | md5sum | cut -d ' ' -f 1)\"; echo\n\nand the time of 147qlw:\n\n    curl -s 'https://arctic-shift.photon-reddit.com/api/posts/ids?ids=147qlw&fields=created_utc,title' ; echo\n    date -u -d @1354562580; TZ=America/Los_Angeles date -d @1354562580"
 },
 "page": "posts/12yvg0/"
}