PDA

View Full Version : Job Opportunity


1771 DELETE
1st Dec 2011, 17:22
For all of you who thought OASC at Biggin Hill and Cranwell was a breeze but are now awaiting the results of tranche 2, follow the link, break the code and GCHQ would love to talk to you. There are 35 vacancies available.

Can you crack it? (http://www.canyoucrackit.co.uk)

Mach Two
1st Dec 2011, 17:31
Oh, Mr. Thicko. Fancy not being able to do that. The answer's obvious!!!

Roadster280
1st Dec 2011, 17:35
There are three ways to do this.

1. Pay a code monkey to solve it. They will work for peanuts.

2. Wait for a proud code monkey to solve it and post the details on the internet. As they always do, in a "look at me" kind of way. As of now it looks like its a memory dump of machine code. Execute the machine code and a second problem comes up.

3. Solve it yourself. Far too time consuming, pay a monkey to do it. See 1) above.

Melchett01
1st Dec 2011, 17:37
It's a hexadecimal code - base 16. Say no more eh, a nod's as good as a wink to a blind bat.

Mach Two
1st Dec 2011, 17:45
Melchett, no! That's what they want you to think!

VinRouge
1st Dec 2011, 18:30
Still working on it. I reckon its using a 16 bit encryption code. The repeated values on lines 5, 15 and 20 (41 and 42) are probably the result of some form of padding. It is pretty unlikely you would get 2 sets of figures like that, unless its 32 bit with the last 16 bits (4 hex character equivalents) identical.

Working on what sort of operator they have used on the unencrypted hex string, guessing the first couple of characters i.e. "the_", "The_" "if_y" etc.

Roadster280
1st Dec 2011, 18:37
You're barking up the wrong tree. It's machine code. When the code is executed, it comes up with a hidden problem.

Google "canyoucrackit" and look for yourselves.

500N
1st Dec 2011, 18:37
Roadster280

"1. Pay a code monkey to solve it. They will work for peanuts."

The peanuts of yesteryear is now Coke, Crisps and Pizza.
Although I noticed the other day that it is now Diet Coke:O

APG63
1st Dec 2011, 18:45
Or try:

Convert Hexadecimal To String Online (http://www.string-functions.com/hex-string.aspx)

Probably won't do it, but it might be worth trying if you can be bothered. I can't.

Anyway, I doubt it's machine code, but it might be a Hex representation of text. On the other hand, that might be too obvious. They're more like to be looking for people that can regognize patterns than machine code.

VinRouge
1st Dec 2011, 19:02
Well, that pissed on my bonfire! Its a programme in Javascript.

http://www.canyoucrackit.co.uk/15b43...d525e5d0b20.js (http://www.canyoucrackit.co.uk/15b436de1f9107f3778aad525e5d0b20.js)

Roadster280
1st Dec 2011, 19:02
Well it's a bizarre twist of fate that some other algorithm comes up with x86 executable code as its cipher text. Well done, that man.

Either that, or it is indeed machine code that when executed reveals something else to be solved.

Melchett01
1st Dec 2011, 19:14
Either that, or it is indeed machine code that when executed reveals something else to be solved.

Not looked at it properly, but if I were a betting man I would guess it requires a conversion from whatever the code is you see on the screen, probably followed by a substitution or transposition cipher of some description which then gives you a cipher text to be decoded into whatever key word they are looking for.

VinRouge
1st Dec 2011, 19:26
If you know what you are doing, you need to read the header file from the actual "cyber.png" image. The saved image file contains the data. Looks like they are being a little cheeky, they are obviously looking for people who can look for data in hidden areas!

Its similar to the technique described here: How to hide files in JPEG pictures (http://www.online-tech-tips.com/computer-tips/hide-file-in-picture/)

The bit you are after is

"QkJCQjIAAACR2PFtcCA6q2eaC8SR+8dmD/zNzLQC+td3tFQ4qx8O447TDeuZw5P+0SsbEcYR.78jKLw=="

Its in base(64).

Mach Two
1st Dec 2011, 21:45
Damn. I can't believe I didn't spot that earlier!

Rigga
1st Dec 2011, 21:52
LO
ORU
ImOK
FUNEPs
S VFMNX2
O-MNXPs
OK

sunshine band
2nd Dec 2011, 08:08
Cracked it! Quite easy really...

Once you are through it, the next screen shows the job on offer...

CYBER SECURITY SPECIALIST


RefCYBER/SEC/SPEC/11 PHASE 2RegionSouth WestLocationCheltenhamSalary£25,446 (GC10) £31,152 (GC9) DisciplineCyber GradeGC10/GC9 Closing date for applications is 12 December 2011

VACANCY DESCRIPTION

Cyber Security Specialist - GC10
Senior Cyber Security Specialist - GC9
GCHQ is at the forefront of the nation's cyber security strategy and is dedicated to ensuring our government can operate in cyber space with confidence. We are committed to staying ahead of the swift pace demanded by the evolving digital world.
In a game where our adversaries operate with no rules and unknown boundary lines, you will be exploring the possibilities and inventing the seemingly impossible. We need pioneers that can push the technical boundaries and cope with the unknown. Our work involves a journey to the very depths of operating systems, complex networks and IT security fundamentals.

Wander00
2nd Dec 2011, 09:01
Salary does not look to hot for the skillls required

Willard Whyte
2nd Dec 2011, 11:32
Would-be spies who crack GCHQ code directed to £25,000 job vacancy - Telegraph (http://www.telegraph.co.uk/news/uknews/defence/8929232/Would-be-spies-who-crack-GCHQ-code-directed-to-25000-job-vacancy.html)

Whenurhappy
2nd Dec 2011, 11:52
Am I the only one concerned that a number of PPruners need to get out more?

My pension's worth more than that salary!

Roadster280
2nd Dec 2011, 12:40
I refer the learned gentlemen to point #1 of post #3 in this thread...

jamesdevice
2nd Dec 2011, 20:44
simple way to do it!
Cllick here Can you crack it? (http://www.canyoucrackit.co.uk/soyoudidit.asp)

No - I didn't find it. See Workaround is found for GCHQ cracking challenge - The Inquirer (http://www.theinquirer.net/inquirer/news/2129647/workaround-gchq-cracking-challenge)

Doh!

Roadster280
2nd Dec 2011, 20:51
The slight fly in the ointment is that when the individual applies for a job there, they will be questioned about such cracking techniques. "I found a URL on the internet" is unlikely to be a successful answer.

Willard Whyte
2nd Dec 2011, 21:49
Possibly. But no worse than saying one paid a codemonkey to do it.

Anyhoo, an hofficer will employ a man to crack codes whilst he himself makes a pipe and services his good lady.

APG63
3rd Dec 2011, 18:26
Only ever went into GCHQ once. Fascinating, but I don't think I'd want to work there forever. Mind you, better than some jobs I've had.

jamesdevice
6th Dec 2011, 08:20
http://gchqchallenge.********.com/

"Dr Gareth Owen, an academic at the University of Greenwich in England has posted a full video explanation of the puzzle (http://gchqchallenge.********.com/#top). The puzzle has three stages and is not at all simple — likely to challenge even the best computer science graduates.

The first stage is to convert the code on the screen to computer code, which turns out to be a decryption algorithm. The data to be decrypted is hidden in the image on the web site (the image of the numbers).

The second stage asks you to build a virtual computer to run a series of codes - which when run produce the link to the third stage.

The third stage gives you a program to run which requires a licence key - the problem is finding the licence key which requires decoding the program and seeing how it works. Then you have to find three hidden numbers from the first two stages and plug them in to get the web address for the final answer."