<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments for Darth Null</title>
	<atom:link href="http://darthnull.org/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://darthnull.org</link>
	<description>Random ramblings from the Dark Lord of Absolutely Nothing</description>
	<lastBuildDate>Thu, 29 Mar 2012 11:15:47 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
	<item>
		<title>Comment on 2012 Verizon DBIR Cover Challenge by Mike Czumak</title>
		<link>http://darthnull.org/2012/03/28/2012-verizon-dbir-cover-challenge/#comment-565</link>
		<dc:creator><![CDATA[Mike Czumak]]></dc:creator>
		<pubDate>Thu, 29 Mar 2012 11:15:47 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=579#comment-565</guid>
		<description><![CDATA[Great synopsis.  Here&#039;s some info about our experience... After starting really late last year and coming in fourth, my co-worker and I were determined to have better results with this one.  After day 1 (Thu) we had the decoded poem from the cover, obtained the pastebin info (we realized the Phone #/IP connection very quickly) and with a quick script to check hash frequency, we also had the pinterest site which gave us the gift (ciphertext) and the encryption recipe for openssl w/ base64 rc4-40 and -nosalt.  We felt we were off to a blazing start after only a couple of hours and were confident we were in the lead.  This is where it all fell apart for us!  We went down the path of removing the &#039;******&#039; from the gift and treating it as one block of ciphertext...it base64 decoded and so we assumed this was correct.  Our next quest was for the right key.  We looked to the poem and the pastebin site, especially the image comments and tried so many different combinations, all in vain of course.  Even though we ultimately had the right key (though we didn&#039;t know it at the time), our assumption on the ciphertext was way off.  In addition, the clues that were coming in via Twitter were for steps we had already accomplished...and were leading our &quot;competition&quot; closer to where we were...very frustrating! I think for too long we were too proud/stubborn to consider asking for clues so we continued further down the wrong path.  When the clue for the grille cipher was released days later we quickly changed gears.  We saw the html formatting of the 8&#039;s (very visible in Firefox 3D tilt) and got our cipher.  Here&#039;s where it got even more frustrating...we realized it was base64 encoded, decoded it, stared at the decoded string and figured since the encryption &#039;recipe&#039; called for -base64, openssl would take care of it; so then we proceeded to use the original encoded string in our decryption efforts!  Of course this led to more frustration and shortly after you had claimed 1st prize, 2nd was also taken and we were once again working with the wrong ciphertext.  When you mentioned the encoding of the final string on Twitter I thought about it for a while, went to bed and the next morning realized that I better base64 decode it before I run it through openssl.  I had a hunch the password was Markitdude all along, tried it and Voila! I sent in our submission in and wouldn&#039;t you know it...missed 3rd place by less than 1 hr!  Either way, we had a great time (even if we did take 4th again) and look forward to next year. Congrats on the win!    -- Mike Czumak]]></description>
		<content:encoded><![CDATA[<p>Great synopsis.  Here&#8217;s some info about our experience&#8230; After starting really late last year and coming in fourth, my co-worker and I were determined to have better results with this one.  After day 1 (Thu) we had the decoded poem from the cover, obtained the pastebin info (we realized the Phone #/IP connection very quickly) and with a quick script to check hash frequency, we also had the pinterest site which gave us the gift (ciphertext) and the encryption recipe for openssl w/ base64 rc4-40 and -nosalt.  We felt we were off to a blazing start after only a couple of hours and were confident we were in the lead.  This is where it all fell apart for us!  We went down the path of removing the &#8216;******&#8217; from the gift and treating it as one block of ciphertext&#8230;it base64 decoded and so we assumed this was correct.  Our next quest was for the right key.  We looked to the poem and the pastebin site, especially the image comments and tried so many different combinations, all in vain of course.  Even though we ultimately had the right key (though we didn&#8217;t know it at the time), our assumption on the ciphertext was way off.  In addition, the clues that were coming in via Twitter were for steps we had already accomplished&#8230;and were leading our &#8220;competition&#8221; closer to where we were&#8230;very frustrating! I think for too long we were too proud/stubborn to consider asking for clues so we continued further down the wrong path.  When the clue for the grille cipher was released days later we quickly changed gears.  We saw the html formatting of the 8&#8242;s (very visible in Firefox 3D tilt) and got our cipher.  Here&#8217;s where it got even more frustrating&#8230;we realized it was base64 encoded, decoded it, stared at the decoded string and figured since the encryption &#8216;recipe&#8217; called for -base64, openssl would take care of it; so then we proceeded to use the original encoded string in our decryption efforts!  Of course this led to more frustration and shortly after you had claimed 1st prize, 2nd was also taken and we were once again working with the wrong ciphertext.  When you mentioned the encoding of the final string on Twitter I thought about it for a while, went to bed and the next morning realized that I better base64 decode it before I run it through openssl.  I had a hunch the password was Markitdude all along, tried it and Voila! I sent in our submission in and wouldn&#8217;t you know it&#8230;missed 3rd place by less than 1 hr!  Either way, we had a great time (even if we did take 4th again) and look forward to next year. Congrats on the win!    &#8212; Mike Czumak</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on 2012 Verizon DBIR Cover Challenge by G Mark Hardy</title>
		<link>http://darthnull.org/2012/03/28/2012-verizon-dbir-cover-challenge/#comment-564</link>
		<dc:creator><![CDATA[G Mark Hardy]]></dc:creator>
		<pubDate>Thu, 29 Mar 2012 01:28:07 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=579#comment-564</guid>
		<description><![CDATA[Wow!  That&#039;s an impressive puzzle and an even more impressive solution.  I always worry about putting this much complexity into a Con badge puzzle or contest, because few have the insight and the perseverence to grind it out to the end.  Hey, with DEFCON 20 coming up, maybe we can up the difficulty factor a bit -- especially if I can get Jeff to spring for an iPad as a prize!  Well done!    -- G. Mark]]></description>
		<content:encoded><![CDATA[<p>Wow!  That&#8217;s an impressive puzzle and an even more impressive solution.  I always worry about putting this much complexity into a Con badge puzzle or contest, because few have the insight and the perseverence to grind it out to the end.  Hey, with DEFCON 20 coming up, maybe we can up the difficulty factor a bit &#8212; especially if I can get Jeff to spring for an iPad as a prize!  Well done!    &#8212; G. Mark</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2008 Badge Puzzle by G Mark Hardy</title>
		<link>http://darthnull.org/2012/02/04/shmoocon-2008-badge-puzzle/#comment-450</link>
		<dc:creator><![CDATA[G Mark Hardy]]></dc:creator>
		<pubDate>Mon, 20 Feb 2012 16:29:11 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=510#comment-450</guid>
		<description><![CDATA[Aww, no crypto shortcuts?  Never say never.  Anyway, there are a couple thousand of my business cards now in circulation, and I tell anyone who is interested the same thing -- &quot;everything you need to solve this is on the card,&quot; and &quot;it can be solved with pencil and paper.&quot;  Except I used pen when building it -- I can never seem to find a pencil when I need one. :)]]></description>
		<content:encoded><![CDATA[<p>Aww, no crypto shortcuts?  Never say never.  Anyway, there are a couple thousand of my business cards now in circulation, and I tell anyone who is interested the same thing &#8212; &#8220;everything you need to solve this is on the card,&#8221; and &#8220;it can be solved with pencil and paper.&#8221;  Except I used pen when building it &#8212; I can never seem to find a pencil when I need one. <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2008 Badge Puzzle by #Geek? #Friday? #Bored? Check out @schuetzdj &#38; his worked solutions of #Security Conference Badge Contests &#8211; dropsafe</title>
		<link>http://darthnull.org/2012/02/04/shmoocon-2008-badge-puzzle/#comment-443</link>
		<dc:creator><![CDATA[#Geek? #Friday? #Bored? Check out @schuetzdj &#38; his worked solutions of #Security Conference Badge Contests &#8211; dropsafe]]></dc:creator>
		<pubDate>Fri, 17 Feb 2012 10:39:36 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=510#comment-443</guid>
		<description><![CDATA[[...] example the ShmooCon 2008 Badge Puzzle or the DEF CON 18 Crypto [...]]]></description>
		<content:encoded><![CDATA[<p>[...] example the ShmooCon 2008 Badge Puzzle or the DEF CON 18 Crypto [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2008 Badge Puzzle by Darth Null</title>
		<link>http://darthnull.org/2012/02/04/shmoocon-2008-badge-puzzle/#comment-441</link>
		<dc:creator><![CDATA[Darth Null]]></dc:creator>
		<pubDate>Sat, 11 Feb 2012 03:56:34 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=510#comment-441</guid>
		<description><![CDATA[Yeah, every couple months I look at that again, and after a couple days, put it away. I&#039;m pretty sure I know what needs to happen, but just can&#039;t find an easy way to do it short of brute forcing it. I sometimes think I should just write a brute force tester and let it run -- if I&#039;d started that a couple years ago it&#039;d be solved by now. 

I was really excited when you updated the cards last year, hoping that now I could try an attack in depth, but it appears you did the right thing and did not reuse key/plaintext in any way that&#039;d help me. :(]]></description>
		<content:encoded><![CDATA[<p>Yeah, every couple months I look at that again, and after a couple days, put it away. I&#8217;m pretty sure I know what needs to happen, but just can&#8217;t find an easy way to do it short of brute forcing it. I sometimes think I should just write a brute force tester and let it run &#8212; if I&#8217;d started that a couple years ago it&#8217;d be solved by now. </p>
<p>I was really excited when you updated the cards last year, hoping that now I could try an attack in depth, but it appears you did the right thing and did not reuse key/plaintext in any way that&#8217;d help me. <img src='http://s0.wp.com/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2008 Badge Puzzle by G Mark Hardy</title>
		<link>http://darthnull.org/2012/02/04/shmoocon-2008-badge-puzzle/#comment-440</link>
		<dc:creator><![CDATA[G Mark Hardy]]></dc:creator>
		<pubDate>Fri, 10 Feb 2012 17:24:53 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=510#comment-440</guid>
		<description><![CDATA[Very impressive!  This is the most complex badge puzzle I&#039;ve seen for a hacker conference.  Although it took nearly four years for a solution to be published, Darth is the guy I would have bet on to do it.
  (Darth -- Now you can turn your attention to my business card puzzle -- it&#039;s been unsolved for the same length of time :)]]></description>
		<content:encoded><![CDATA[<p>Very impressive!  This is the most complex badge puzzle I&#8217;ve seen for a hacker conference.  Although it took nearly four years for a solution to be published, Darth is the guy I would have bet on to do it.<br />
  (Darth &#8212; Now you can turn your attention to my business card puzzle &#8212; it&#8217;s been unsolved for the same length of time <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2012 Badge Puzzle by Darth Null</title>
		<link>http://darthnull.org/2012/02/03/shmoocon-2012-badge-puzzle/#comment-436</link>
		<dc:creator><![CDATA[Darth Null]]></dc:creator>
		<pubDate>Mon, 06 Feb 2012 16:41:57 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=448#comment-436</guid>
		<description><![CDATA[I also ensured that &quot;GMH&quot; (G. Mark) and &quot;DJS&quot; (my initials) were available on the wheels as potential distractors. :)

I&#039;m glad that the &quot;one stage leads to the next&quot; format worked. I first really saw that with G. Mark&#039;s TOORCON 12 puzzle, and I like the structure of it. Though I do think that there should be some looping / branching, just to make things a little more interesting. Maybe next year. Finally, I&#039;m really glad that you&#039;re learning from my mistakes as far as keeping things simple. Refocusing, stepping back, keeping an open mind, not getting bogged down on a single approach (whether that approach is reasonable or rabbit-hole-crazy) is a skill that I&#039;m still developing.

Thanks again for your comments. Seeing what you went through, and your enjoyment and enthusiasm, makes it all worthwhile!]]></description>
		<content:encoded><![CDATA[<p>I also ensured that &#8220;GMH&#8221; (G. Mark) and &#8220;DJS&#8221; (my initials) were available on the wheels as potential distractors. <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>I&#8217;m glad that the &#8220;one stage leads to the next&#8221; format worked. I first really saw that with G. Mark&#8217;s TOORCON 12 puzzle, and I like the structure of it. Though I do think that there should be some looping / branching, just to make things a little more interesting. Maybe next year. Finally, I&#8217;m really glad that you&#8217;re learning from my mistakes as far as keeping things simple. Refocusing, stepping back, keeping an open mind, not getting bogged down on a single approach (whether that approach is reasonable or rabbit-hole-crazy) is a skill that I&#8217;m still developing.</p>
<p>Thanks again for your comments. Seeing what you went through, and your enjoyment and enthusiasm, makes it all worthwhile!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2012 Badge Puzzle by Matthew (@magicmatt)</title>
		<link>http://darthnull.org/2012/02/03/shmoocon-2012-badge-puzzle/#comment-435</link>
		<dc:creator><![CDATA[Matthew (@magicmatt)]]></dc:creator>
		<pubDate>Mon, 06 Feb 2012 16:08:04 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=448#comment-435</guid>
		<description><![CDATA[Well as for the last stages of the puzzle, we had the vins already as I was pretty sure we were going to need them at some point.  Of course I knew you had solved the puzzle the last three times so we progressed to the three gear stage rather quickly.  The three gear stage was pretty tricky though :).  I tried them the way they were, forwards and backwards but no dice.  I then convinced myself that K-E-Y was the key since there was only one k, e, and y on each respective gear.  At first we were stuck on how many revolutions it would take to get the gears to align to key.  Take that number and rotate the previous 7 gear&#039;s to get the key to the VIN’s.  The method was way too complicated and did not work.  I then realized I could just set the three gears to key and try reading forwards and backwards.  All of a sudden I saw &quot;YOUHAV&quot; pop out and I went crazy!  I kept decoding it three letter chunks at a time because I just wanted to see what it said.  I was very excited because I could not think of any more cipher text that needed decoding.  I thought it was over and we had one.  Then I decoded &quot;NOW FOR THE FINAL CHALLENGE&quot; and I started to get stressed again because there was one more step.  At the very end our key was messed up and I entered the cipher text wrong so we decoded WHAT CAR DOES BRUCE STILL HAVE ON BLVORD.  I felt like Ralphie from &quot;A Christmas Story&quot; saying &quot;have on what?&quot;, &quot;HAVE ON WHAT?&quot;.  We then corrected it to blocks after we identified the mistake.

I thought that the puzzle was perfect because each stage led me to the next and presented a clue for the key.  You should remember that I had read how it is important to keep it simple.  Many of your puzzles showcase how easy the answer was after you know the solution and the importance to not over-complicate matters.  At every stage and at every dead end I took a step back and said what I know, what is there left, and what was the clue.  This allowed me to refocus on a simple approach after I made leaps in the wrong direction.  I hope you are not disappointed now that you know all the wrong directions I went :).  It was challenging and set us for loops at times!

-Matthew]]></description>
		<content:encoded><![CDATA[<p>Well as for the last stages of the puzzle, we had the vins already as I was pretty sure we were going to need them at some point.  Of course I knew you had solved the puzzle the last three times so we progressed to the three gear stage rather quickly.  The three gear stage was pretty tricky though <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> .  I tried them the way they were, forwards and backwards but no dice.  I then convinced myself that K-E-Y was the key since there was only one k, e, and y on each respective gear.  At first we were stuck on how many revolutions it would take to get the gears to align to key.  Take that number and rotate the previous 7 gear&#8217;s to get the key to the VIN’s.  The method was way too complicated and did not work.  I then realized I could just set the three gears to key and try reading forwards and backwards.  All of a sudden I saw &#8220;YOUHAV&#8221; pop out and I went crazy!  I kept decoding it three letter chunks at a time because I just wanted to see what it said.  I was very excited because I could not think of any more cipher text that needed decoding.  I thought it was over and we had one.  Then I decoded &#8220;NOW FOR THE FINAL CHALLENGE&#8221; and I started to get stressed again because there was one more step.  At the very end our key was messed up and I entered the cipher text wrong so we decoded WHAT CAR DOES BRUCE STILL HAVE ON BLVORD.  I felt like Ralphie from &#8220;A Christmas Story&#8221; saying &#8220;have on what?&#8221;, &#8220;HAVE ON WHAT?&#8221;.  We then corrected it to blocks after we identified the mistake.</p>
<p>I thought that the puzzle was perfect because each stage led me to the next and presented a clue for the key.  You should remember that I had read how it is important to keep it simple.  Many of your puzzles showcase how easy the answer was after you know the solution and the importance to not over-complicate matters.  At every stage and at every dead end I took a step back and said what I know, what is there left, and what was the clue.  This allowed me to refocus on a simple approach after I made leaps in the wrong direction.  I hope you are not disappointed now that you know all the wrong directions I went <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> .  It was challenging and set us for loops at times!</p>
<p>-Matthew</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2012 Badge Puzzle by Darth Null</title>
		<link>http://darthnull.org/2012/02/03/shmoocon-2012-badge-puzzle/#comment-434</link>
		<dc:creator><![CDATA[Darth Null]]></dc:creator>
		<pubDate>Mon, 06 Feb 2012 14:09:21 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=448#comment-434</guid>
		<description><![CDATA[So glad you had fun! I&#039;m a little disappointed that the bulk of the puzzle fell so quickly after you got the badges in order, but then maybe you&#039;d already been thinking about later stages anyway. It&#039;s especially funny how you danced around the ShmooCon date trick but never quite latched on.

And I&#039;m glad that my writeups here helped... don&#039;t feel like that&#039;s &quot;cheating&quot;. :) I try to document these puzzles for two reasons: 1, so that great puzzles aren&#039;t lost to time (and that others may build upon past successes), and 2, so that people can learn more about solving them. So if my posts helped you in any way, that&#039;s a big win in my book!]]></description>
		<content:encoded><![CDATA[<p>So glad you had fun! I&#8217;m a little disappointed that the bulk of the puzzle fell so quickly after you got the badges in order, but then maybe you&#8217;d already been thinking about later stages anyway. It&#8217;s especially funny how you danced around the ShmooCon date trick but never quite latched on.</p>
<p>And I&#8217;m glad that my writeups here helped&#8230; don&#8217;t feel like that&#8217;s &#8220;cheating&#8221;. <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  I try to document these puzzles for two reasons: 1, so that great puzzles aren&#8217;t lost to time (and that others may build upon past successes), and 2, so that people can learn more about solving them. So if my posts helped you in any way, that&#8217;s a big win in my book!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on ShmooCon 2012 Badge Puzzle by Matthew (@magicmatt)</title>
		<link>http://darthnull.org/2012/02/03/shmoocon-2012-badge-puzzle/#comment-431</link>
		<dc:creator><![CDATA[Matthew (@magicmatt)]]></dc:creator>
		<pubDate>Sun, 05 Feb 2012 05:20:31 +0000</pubDate>
		<guid isPermaLink="false">http://darthnull.org/?p=448#comment-431</guid>
		<description><![CDATA[Hey Darth,
I did enjoy it!  I am in fact a regular reader of all of your crypto solutions.  I studied the past badge puzzles here and how you solved them.  When I left work on Thursday before the con all I could think about was that I was going to solve and hopefully win this year’s puzzle.  I knew (or thought at the time) that meant I had to contend with you and your knack for solving these things.  When Friday came I got my badge and started to check out the program for all elements that may be involved.  I was pretty sure that there were 7 badges I just had to find them.  The guy next to me had badge 0128 and did not want me to photograph and share it because he thought it may contain Personally Identifiable Information :/ (I even told him that there were only seven unique badges).  Luckily the guy in front of me was a speaker from Foundstone and said to follow him on twitter to get all the pictures of the badges.  Later I saw the tweet by you &quot;First big breakthrough on the ShmooCon badge puzzle!&quot;  I immediately thought you were talking about yourself and I started to get bummed out.  Later hope was restored when I read &quot;I&#039;m actually not playing the ShmooCon Badge contest this year. But happy to throw some hints out. :) &quot;  Now that I knew the Dark Lord was out of the running, I knew I could do this!

Friday night Mike and I had all the badge pictures but were stuck at how to order them.  I went to sleep knowing that we needed to find an order to these badges to move on. At 6am Saturday morning I woke up having thought that representing the numbers xxxx as xx/xx would produce dates. I immediately thought that 7 badges = 7 days of the week however it worked out to not be unique days of the week, I was stumped again. At 9am I rode in to ShmooCon with Mike and we discussed my thought that they were dates.  He then asked &quot;Was ShmooCon always the last weekend in January?&quot; I said I was not sure and we moved on. We were so close but did not make the connection.  As it turned out we never did or did we need to. On 395 I saw the clue from GMark about reading down for directions. Under direction from Mike I just tried to make a word from the first letters of the boxed badge text (see the GMark method above in his comment).  At the con Mike fixed up a simple error I made and we were off to &quot;Turn the gears&quot;.  Two hours later and the puzzle was solved.  I loved the literal use of key and the 80 char long key string, typing that on my phone was a challenge.  I also loved when we asked Bruce directly and he looked at Heidi and asked if he could answer she said no and he told us he was leaving so he did not do anything stupid.  The reason Mike and I looked through the program was that we thought one of the five car repair slips might have had the initials BP (Bruce Potter).  I was really asked by Heidi &quot;who do I ask for anything I don&#039;t know&quot; to which I replied &quot;the internet&quot;.  The crowd loved that the closing ceremony.

I did find it odd that both you and GMark were tweeting hints so after it was done I sent some tweets GMark&#039;s way.  I told him I did not see any &quot;gmarks&quot; in the puzzle and he said that this puzzle was your show and was just a consultant.  After I saw this it was quite obvious as to why you were not competing, and knew all the answers (you designed it).
Sorry for the long comment. I just wanted to give my side and the obstacles Mike and I faced.  By the way after I found out that you had made the puzzle I almost felt like I had cheated, knowing that I read all of your crypto posts here.  This was my second ShmooCon and I found your site after last year&#039;s groans that you had won again, I needed to see who this guy was that had won.  

Long and short Great puzzle, I had a wonderful time figuring it out!  Perhaps you may get some joy knowing that you had an unintentional hand in training the winners.

-Matthew]]></description>
		<content:encoded><![CDATA[<p>Hey Darth,<br />
I did enjoy it!  I am in fact a regular reader of all of your crypto solutions.  I studied the past badge puzzles here and how you solved them.  When I left work on Thursday before the con all I could think about was that I was going to solve and hopefully win this year’s puzzle.  I knew (or thought at the time) that meant I had to contend with you and your knack for solving these things.  When Friday came I got my badge and started to check out the program for all elements that may be involved.  I was pretty sure that there were 7 badges I just had to find them.  The guy next to me had badge 0128 and did not want me to photograph and share it because he thought it may contain Personally Identifiable Information :/ (I even told him that there were only seven unique badges).  Luckily the guy in front of me was a speaker from Foundstone and said to follow him on twitter to get all the pictures of the badges.  Later I saw the tweet by you &#8220;First big breakthrough on the ShmooCon badge puzzle!&#8221;  I immediately thought you were talking about yourself and I started to get bummed out.  Later hope was restored when I read &#8220;I&#8217;m actually not playing the ShmooCon Badge contest this year. But happy to throw some hints out. <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  &#8221;  Now that I knew the Dark Lord was out of the running, I knew I could do this!</p>
<p>Friday night Mike and I had all the badge pictures but were stuck at how to order them.  I went to sleep knowing that we needed to find an order to these badges to move on. At 6am Saturday morning I woke up having thought that representing the numbers xxxx as xx/xx would produce dates. I immediately thought that 7 badges = 7 days of the week however it worked out to not be unique days of the week, I was stumped again. At 9am I rode in to ShmooCon with Mike and we discussed my thought that they were dates.  He then asked &#8220;Was ShmooCon always the last weekend in January?&#8221; I said I was not sure and we moved on. We were so close but did not make the connection.  As it turned out we never did or did we need to. On 395 I saw the clue from GMark about reading down for directions. Under direction from Mike I just tried to make a word from the first letters of the boxed badge text (see the GMark method above in his comment).  At the con Mike fixed up a simple error I made and we were off to &#8220;Turn the gears&#8221;.  Two hours later and the puzzle was solved.  I loved the literal use of key and the 80 char long key string, typing that on my phone was a challenge.  I also loved when we asked Bruce directly and he looked at Heidi and asked if he could answer she said no and he told us he was leaving so he did not do anything stupid.  The reason Mike and I looked through the program was that we thought one of the five car repair slips might have had the initials BP (Bruce Potter).  I was really asked by Heidi &#8220;who do I ask for anything I don&#8217;t know&#8221; to which I replied &#8220;the internet&#8221;.  The crowd loved that the closing ceremony.</p>
<p>I did find it odd that both you and GMark were tweeting hints so after it was done I sent some tweets GMark&#8217;s way.  I told him I did not see any &#8220;gmarks&#8221; in the puzzle and he said that this puzzle was your show and was just a consultant.  After I saw this it was quite obvious as to why you were not competing, and knew all the answers (you designed it).<br />
Sorry for the long comment. I just wanted to give my side and the obstacles Mike and I faced.  By the way after I found out that you had made the puzzle I almost felt like I had cheated, knowing that I read all of your crypto posts here.  This was my second ShmooCon and I found your site after last year&#8217;s groans that you had won again, I needed to see who this guy was that had won.  </p>
<p>Long and short Great puzzle, I had a wonderful time figuring it out!  Perhaps you may get some joy knowing that you had an unintentional hand in training the winners.</p>
<p>-Matthew</p>
]]></content:encoded>
	</item>
</channel>
</rss>

