Hacker News new | ask | show | jobs
by spdustin 3012 days ago
Based on this tweet†, it seems that Chris downloaded the repos and put them online, encrypted using some of his personal information as a sort of "dead man's switch".

https://twitter.com/VickerySec/status/978056901677146112

2 comments

I'm not sure I understand the point of this.

He wants us to open the file but he wants it to be annoying?

  For posterity:
  <14-character non-dictionary word>+<My current CA DL number>+<Streetname of my residence during 1st grade>
  Schema: aaaaaaaaaaaaaa+Annnnnnn+Aaaa Aaaaaaa
  (a=lower alpha, A=upper alpha, n=numeric)
  md5 those 36-characters. Hash is the passphrase
Driver's license numbers are likely sequential, so the keyspace is likely guessable, or recoverable from credit data breaches. Street name is an easier find, from public records.

Since we know that non-dictionary word is 14-characters, and assuming English, entropy should much less than 26^14.

anyone willing to give it a spin?

Chris lived in BC, so this would be what his driver's license looked like: http://www.metronews.ca/news/vancouver/2013/02/15/new-b-c-id...

It's an 8 digit number.

The keyspace for the streets would be a list of every street in Greater Victoria.

"non-dictionary" is 14-characters long
Time to fire up hashcat on aws.