explain xkcd - User contributions [en]

Talk:1458: Small Moon

2014-12-11T00:57:02Z

Haelbarde:

Probably another dig at the Pluto "dwarf planet" controversy?[[Special:Contributions/199.27.133.109|199.27.133.109]] 06:38, 10 December 2014 (UTC)
:Implying that it might not be? [[Special:Contributions/108.162.216.109|108.162.216.109]] 15:54, 10 December 2014 (UTC)

This is too good. I laughed for about 2 straight minutes.. :D [[Special:Contributions/199.27.128.89|199.27.128.89]] 06:50, 10 December 2014 (UTC)

Added a short placeholder explanation for the comic itself, using [[Special:Contributions/199.27.133.109|199.27.133.109]]'s suggestion. Needs refining and explaining of the alt text. Cheers. [[Special:Contributions/173.245.54.207|173.245.54.207]] 07:04, 10 December 2014 (UTC)

In the movie, they didn't have 3 hours to argue over the thing. Not sure if that's relevant... [[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 07:11, 10 December 2014 (UTC)

The reason it couldn't be a space station would be that something so large would wind up collapsing in on its own gravity. [[Special:Contributions/173.245.54.204|173.245.54.204]] 08:38, 10 December 2014 (UTC)
:It's not solid, it's a comapritively low density on the whole (on the order of ten thousand million''th''s that of Earth's sea-level atmospheric pressure, if I've not thrown a rogue zero or two in to the calculation by accident, so is doubtless mostly vacuum outside of the functional/habitable/structural areas), there are obviously various gravitational compensators for the inhabited sections (hence "looking sideways out of the equator ring" and along the beam-channel, yet "up from the surface" from the trench system defence turrets and other internal shafts are also vertiginously 'up-down' in nature) and doubtless its structural stength is composed of various Unotanium (i.e. "durasteel") alloys and the like, way beyond what we could currently build with Earthly technology. [[Special:Contributions/141.101.98.245|141.101.98.245]] 10:37, 10 December 2014 (UTC)

I would note that a Death '''Star''' can not be a moon. [[User:Briff|Briff]] ([[User talk:Briff|talk]]) 10:10, 10 December 2014 (UTC)
:Note that it is canon that the "Star Destroyer"s are neither (if taken literally) capable of destroying stars nor (in the sense of "star ship" in general) are they technically destroyer-class ships. You've got to put it down to The Empire just having no sense of relevence when it comes to naming its vessels. Probably too much influence from clone-thinking... [[Special:Contributions/141.101.98.245|141.101.98.245]] 10:37, 10 December 2014 (UTC)
:I will argue that by my understanding of the term, it actually is a moon whenever it is orbiting a planet but it would probably be better to come up with new terminology given the interstellar capabilities. --[[Special:Contributions/108.162.237.183|108.162.237.183]] 12:44, 10 December 2014 (UTC)Band of Traveling Accountants

I've never heard of the word "deunifying"; did you mean "disuniting" or "disunifying"?[[Special:Contributions/173.245.54.203|173.245.54.203]] 14:09, 10 December 2014 (UTC)
:That would probably have been me who wrote that. I didn't spend too much time thinking about it, was just putting something up, fully expecting it to get fixed up later [[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 00:57, 11 December 2014 (UTC)

I marked the transcript as incomplete; we can't be sure as to who is saying which lines in the final panel without Randall telling us himself. Notably, the second-to-last-line does not sound like something Ben Kenobi would say; more likely it's Han Solo. [[Special:Contributions/108.162.216.188|108.162.216.188]] 13:54, 10 December 2014 (UTC)
:Agreed. Comment is much more easily seen as coming from Solo than Kenobi. And, if they did rescue Leia during the intervening interval (one of the two scenarios suggested), Kenobi wouldn't be present. Equinox [[Special:Contributions/199.27.128.117|199.27.128.117]] 16:59, 10 December 2014 (UTC)
:I have two reasons why I'd stick with my original Luke and Ben for the last panel: 1) On a cursory read of the comic, without thinking about what would have happened in the movie, the natural assumption is they have been arguing for the entire 3 hours, so its the same two people, and 2) If they had actually been captured by the Death Star, there would no longer be any argument. They would have found upon closer inspection that it is in fact a space station. Note that in the final panel they're arguing about classifying it as a moon, as opposed to the Title Text, in which the options both acknowledge its artificial/station status.[[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 00:57, 11 December 2014 (UTC)

Dear other editors: "In this galaxy" was wordplay on the {{w|Star Wars opening crawl}}. I find your lack of pop culture disturbing. Changing the phrase to "In this solar system" was incorrect. Furthermore, although the predominant civilization on Earth allows moons of nearly any size, it is not necessarily true that inhabitants of SWG followed the same nomenclature. I think the wording should be restored. - [[User:Frankie|Frankie]] ([[User talk:Frankie|talk]]) 17:42, 10 December 2014 (UTC)

:In fact, we know for sure that SWG defines "moon" differently {{w|Natural satellite|than we do}}, because when the Millennium Falcon arrived, the Death Star was not orbiting another non-star body (it was the largest body in its spatial neighborhood) and therefore could not be a moon (as defined in this galaxy). - [[User:Frankie|Frankie]] ([[User talk:Frankie|talk]]) 18:03, 10 December 2014 (UTC)

1458: Small Moon

2014-12-10T07:20:21Z

Haelbarde: Added a preliminary explanation for the title text

{{comic
| number = 1458
| date = December 10, 2014
| title = Small Moon
| image = small_moon.png
| titletext = GENERAL JAN DODONNA: An analysis of the plans provided by Princess Leia has reinvigorated the arguments of the 'artificial moonlet' and 'rogue planet-station' camps. I fear this question is fracturing the Rebellion.
}}

The comic depicts a dialog from the film Star Wars episode IV, where the heroes follow a spacecraft to the never been seen before Death Star, a huge battleship in the size of an arguably small moon, capable of destroying an entire planet. This dialog ignites an argument similar to the one discussing whether or not Pluto should be classified as a planet or as a dwarf planet.

The title text makes reference to a later scene in the film when Rebel pilots are being briefed on the planned attack on the the Death Star. Those who analysed the plans for the Death Star run into the same discussion picture, and end up arguing about the classification of the the Death Star, deviding those involved into the 'artifical moonlet' camp and the 'rogue planet-station' camp, thus deunifying the rebellion. If events are otherwise the same from the movie, this is also happening at threat of their destruction, and thus a crippling of the Rebellion.

==Transcript==
:[Millennium Falcon follows a Tie Fighter towards an unidentified orb in the distance]
:Luke Skywalker: He's heading for that small moon.
:Ben Kenobi: That's no moon - it's a space station.
:Luke Skywalker: It's too big to be a space station.
:Ben Kenobi: But it's too '''''small''''' to be a moon.
:Three hours pass
:Luke Skywalker: Fine! What if we agree it's not a moon, but we make a new category called "Dwarf Moon"?
:Ben Kenobi: And what's the cutoff, asshole?! Is this '''''ship''''' a dwarf moon now?
:Luke Skywalker: Screw you.
{{comic discussion}}
[[Category:Space]]
[[Category:Star Wars]]

Talk:1458: Small Moon

2014-12-10T07:11:35Z

Haelbarde:

Probably another dig at the Pluto "dwarf planet" controversy?[[Special:Contributions/199.27.133.109|199.27.133.109]] 06:38, 10 December 2014 (UTC)

This is too good. I laughed for about 2 straight minutes.. :D [[Special:Contributions/199.27.128.89|199.27.128.89]] 06:50, 10 December 2014 (UTC)

Added a short placeholder explanation for the comic itself, using [[Special:Contributions/199.27.133.109|199.27.133.109]]'s suggestion. Needs refining and explaining of the alt text. Cheers. [[Special:Contributions/173.245.54.207|173.245.54.207]] 07:04, 10 December 2014 (UTC)

In the movie, they didn't have 3 hours to argue over the thing. Not sure if that's relevant... [[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 07:11, 10 December 2014 (UTC)

1458: Small Moon

2014-12-10T07:09:09Z

Haelbarde: /* Transcript */ Lengthened names, fixed typo

{{comic
| number = 1458
| date = December 10, 2014
| title = Small Moon
| image = small_moon.png
| titletext = GENERAL JAN DODONNA: An analysis of the plans provided by Princess Leia has reinvigorated the arguments of the 'artificial moonlet' and 'rogue planet-station' camps. I fear this question is fracturing the Rebellion.
}}

The comic depics a dialog from the film Star Wars episode IV, where the heroes follow a spacecraft to the never been seen before Death Star, a huge battleship in the size of an arguably small moon, capable of destroying an entire planet. This dialog ignites an argument similar to the one discussing whether or not Pluto should be classified as a planet or as a dwarf planet.

==Transcript==
:[Millennium Falcon follows a Tie Fighter towards an unidentified orb in the distance]
:Luke Skywalker: He's heading for that small moon.
:Ben Kenobi: That's no moon - it's a space station.
:Luke Skywalker: It's too big to be a space station.
:Ben Kenobi: But it's too '''''small''''' to be a moon.
:Three hours pass
:Luke Skywalker: Fine! What if we agree it's not a moon, but we make a new category called "Dwarf Moon"?
:Ben Kenobi: And what's the cutoff, asshole?! Is this '''''ship''''' a dwarf moon now?
:Luke Skywalker: Screw you.
{{comic discussion}}
[[Category:Space]]
[[Category:Star Wars]]

1458: Small Moon

2014-12-10T06:55:31Z

Haelbarde: /* Transcript */ Added a scene description, and removed square brackets from the time passing comment

1458: Small Moon

2014-12-10T06:49:52Z

Haelbarde: Added a transcript. Not sure of proper form for the time passing section.

1047: Approximations

2014-07-31T14:10:31Z

Haelbarde: /* Explanation */ Made the formatting of the proof a bit more consistent with itself.

{{comic
| number = 1047
| date = April 25, 2012
| title = Approximations
| image = approximations.png
| titletext = Two tips: 1) 8675309 is not just prime, it's a twin prime, and 2) if you ever find yourself raising log(anything)^e or taking the pi-th root of anything, set down the marker and back away from the whiteboard; something has gone horribly wrong.
}}
{{incomplete|The layout is still bad. And the cos(pi/7) + cos(3pi/7) + cos(5pi/7) issue is still not explained. See discussion.}}
==Explanation==
This comic lists some approximations for numbers, most of them mathematical and physical constants. All of them work astonishingly well. There are reoccurring math jokes along the lines of, "3/5 + π/(7 – π) – √2 = 0, but your calculator is probably not good enough to compute this correctly", which are mainly used to troll geeks.

Furthermore, there are some useful approximations (which were even more useful in times before calculators) such as "pi is approximately equal to 22/7".

[[Randall]] makes fun of both of these, using rather strange approximations (honestly: you may handle 22/7, but who can calculate in a sensible way with 99^8, let alone 30^(pi^e)?) to calculate some constants that are easy enough to handle in the decimal system, and stating such "slightly wrong" trick equations, one of which ''is'' actually correct (which may astonish only those who are not familiar with cosines): cos(π/7)+cos(3π/7)+cos(5π/7) = (cos(π/7)+cos(3π/7)+cos(5π/7))*2sin(π/7)/(2sin(π/7)) = (2cos(π/7)sin(π/7)+2cos(3π/7)sin(π/7)+2cos(5π/7)sin(π/7))/(2sin(π/7)) = ( 2cos(π/7)sin(π/7) + (sin(3π/7)*cos(π/7)+cos(3π/7)sin(π/7)) - (sin(3π/7)*cos(π/7)-cos(3π/7)sin(π/7)) + (sin(5π/7)*cos(π/7)+cos(5π/7)sin(π/7)) - (sin(5π/7)*cos(π/7)-cos(5π/7)sin(π/7)) ) / (2sin(π/7)) = (sin(2π/7)+sin(3π/7+π/7)-sin(3π/7-π/7)+sin(5π/7+π/7)-sin(5π/7-π/7))/(2sin(π/7)) 
= (sin(2π/7)+sin(4π/7)-sin(2π/7)+sin(π-π/7)-sin(4π/7))/(2sin(π/7)) 
= sin(π-π/7)/(2sin(π/7)) 
= (sin(π)cos(-π/7)+cos(π)sin(-π/7))/(2sin(π/7)) 
= (0*cos(-π/7)+(-1*sin(-π/7)))/(2sin(π/7)) 
= -sin(-π/7)/(2sin(π/7)) 
= sin(π/7)/(2sin(π/7)) 
= 1/2

 cos(π/7) + cos(3π/7) + cos(5π/7) 

* Multiplying by 1 (or by a number divided by itself) leaves the equation unchanged.

= (cos(π/7) + cos(3π/7) + cos(5π/7)) (2sin(π/7)/2sin(π/7)) 

* The sin(π/7) on the top of the fraction is multiplied through the original equation. 

= (2cos(π/7)sin(π/7) + 2cos(3π/7)sin(π/7) + 2cos(5π/7)sin(π/7)) (1/2sin(π/7)) 

* Use the trigonometric identity 2cos(A)sin(B)=sin(A+B)-sin(A-B) on the 2nd two terms ([2cos(3π/7)sin(π/7)] + {2cos(5π/7)sin(π/7)}) (1/2sin(π/7)). 

= (2cos(π/7)sin(π/7) + [sin(3π/7+π/7) - sin(3π/7-π/7)] + {sin(5π/7+π/7) - sin(5π/7-π/7)}) (1/2sin(π/7)) 

= (2cos(π/7)sin(π/7) + [sin(4π/7) - sin(2π/7)] + {sin(6π/7) - sin(4π/7)}) (1/2sin(π/7)) 
* Use the trigonometric identity 2cos(A)sin(A) = sin(2A) on the first term (2cos(π/7)sin(π/7)). 
= (sin(2π/7) + [sin(4π/7) - sin(2π/7)] + {sin(6π/7) - sin(4π/7)}) (1/2sin(π/7)) 
= (sin(6π/7) + [sin(2π/7) - sin(2π/7)] + {sin(4π/7) - sin(4π/7)}) (1/2sin(π/7)) 
= (sin(6π/7)) (1/2sin(π/7)) 

* Note that 6π/7 = (7π - π)/7 = 7π/7 - π/7 = π - π/7. 

= (sin(π - π/7)) (1/2sin(π/7)) 
 
* Use the trigonometric identity sin(A - B) = sin(A)cos(B) - cos(A)sin(B). 
= (sin(π)cos(π/7) - cos(π)sin(π/7)) (1/2sin(π/7)) 
 
* Now sin(π) = 0 and cos(π) = -1. 
= ((0)cos(π/7) - (-1)sin(π/7)) (1/2sin(π/7)) 
= ((1)sin(π/7)) (1/2sin(π/7)) 
= (sin(π/7)) (1/2sin(π/7)) 
= (sin(π/7)/2sin(π/7)) 
= (1/2) (sin(π/7)/sin(π/7)) 
= 1/2

:{| class="wikitable"
|-
|align="center"|Thing to be approximated:
|align="center"|Formula proposed:
|align="center"|Resulting approximate value:
|align="center"|Correct value:
|align="center"|Discussion:
|-
|align="center"|One light year(m)
|align="center"|998
|align="center"|9,227,446,944,279,201
|align="center"|9,460,730,472,580,800 (exact)
|align="left"|998 and 698 are sexual references.
|-
|align="center"|Earth Surface(m2)
|align="center"|698
|align="center"|513,798,374,428,641
|align="center"|5.10072*1014
|align="left"|998 and 698 are sexual references.
|-
|align="center"|Ocean's volume(m3)
|align="center"|919
|align="center"|1,350,851,717,672,992,089
|align="center"|1,332*1018
|align="left"|
|-
|align="center"|Seconds in a year
|align="center"|754
|align="center"|31,640,625
|align="center"|31,557,600 (Julian calendar) 31,556,952 (Gregorian calendar)
|align="left"|After this comic was released [[Randall]] got many responses by viewers. So he did add this statement to the top of the comic page:
"Lots of emails mention the physicist favorite, 1 year = pi x 107 seconds. 754 is a hair more accurate, but it's hard to top 3,141,592's elegance." Pi x 107 is nearly equal to 31,415,926.536, and 754 is exactly 31,640,625. Randall's elegance belongs to the number pi, but it should be multiplied by the factor of ten.

Using the traditional definitions that a second is 1/60th of a minute, a minute is 1/60th of an hour, and an hour is 1/24th of a day, a 365-day year is exactly 31,536,000 seconds (the "for rent method" approximation). Until the calendar was reformed by Pope Gregory, there was one leap year in every four years, making the average year 365.25 days, or 31,557,600. On the current calendar system, there are only 97 leap years in every 400 years, making the average year 365.2425 days, or 31,556,952 seconds. In technical usage, a "second" is now defined based on physical constants, even though the length of a day varies inversely with the changing angular velocity of the earth. To keep the official time synchronized with the rotation of the earth, a "leap second" is occasionally added, resulting in a slightly longer year.
|-
|align="center"|Seconds in a year (rent method)
|align="center"|525,600 x 60
|align="center"|31,536,000
|align="center"|31,557,600 (Julian calendar) 31,556,952 (Gregorian calendar)
|align="left"|"Rent Method" refers to the song "Seasons of Love" from the musical "{{w|Rent (musical)|Rent}}." The song asks, "How do you measure a year?" One line says "525,600 minutes" while most of the rest of the song suggests the best way to measure a year is moments shared with a loved one.
|-
|align="center"|Age of the universe (seconds)
|align="center"|1515
|align="center"|437,893,890,380,859,375
|align="center"|4.354±0.012*1017 (best estimate; exact value unknown)
|align="left"|
|-
|align="center"|Planck's constant
|align="center"|1/(30πe)
|align="center"|6.68499014108082*10−34 (rounded)
|align="center"|6.62606957*10−34
|align="left"|Informally, the {{w|Planck constant}} is the smallest action possible in quantum mechanics.
|-
|align="center"|Fine structure constant
|align="center"|1/140
|align="center"|0.00714285717142857171428571, etc. (repeating 71428571)
|align="center"|0.00729735257 (accepted value as of 2011), close to 1/137
|align="left"|The {{w|fine structure constant}} indicates the strength of electromagnetism. It is unitless and around 0.007297, close to 1/137. At one point it was believed to be exactly the reciprocal of 137, and many people have tried to find a simple formula explaining this (with a pinch of {{w|numerology}} thrown in at times), including the infamous {{w|Arthur Eddington|Sir Arthur Adding-One}}.
|-
|align="center"|Fundamental charge
|align="center"|3/(14 * πππ)
|align="center"|1.59895121062716*10−19 (rounded)
|align="center"|1.602176565*10−19 (rounded)
|align="left"|This is the charge of the proton, symbolized "e" for electron (whose charge is actually -e. You can blame Benjamin Franklin [[567|for that]])
|-
|align="center"|Telephone number for the White House Switchboard
|align="center"|1/ 
π√(e(1 + (e-1)√8))
|align="center"|.2024561414 (truncated)
|align="center"|2024561414
|align="left"|
|-
|align="center"|Jenny's Constant
|align="center"|(7(e/1 - 1/e) - 9) * π2
|align="center"|867.530901981685 (approximately)
|align="center"|8675309
|align="left"|Jenny's constant comes from Tommy Tutone's tune {{w|867-5309/Jenny}}. The number 8675309 at the title text refers to the song 867-5309/Jenny as mentioned above, causing a fad of people dialing this number and asking for "Jenny". The number is in fact a {{w|twin prime}} because 8675311 is also a prime. Twin primes have always been a subject of interest, because they are comparatively rare, and because it is not yet known whether there are infinitely many of them.
|-
|align="center"|World Population Estimate (billions)
|align="center"|Equivalent to 6+((3/4 Year + 1/4 (Year mod 4) - 1499)/10) billion
|align="center"|2005 6.5
2006 6.6
2007 6.7
2008 6.7
2009 6.8
2010 6.9
2011 7
2012 7
2013 7.1
2014 7.2
2015 7.3
2016 7.3
2017 7.4
2018 7.5
2019 7.6
2020 7.6
2021 7.7
2022 7.8
2023 7.9
2024 7.9
2025 8
2026 8.1
2027 8.2
2028 8.2
2029 8.3
2030 8.4
2031 8.5
2032 8.5
|align="center"|
|align="left"|
|-
|align="center"|U.S. Population Estimate (millions)
|align="center"|Equivalent to 310+3*(Year - 2010) million
|align="center"|2000 280
2001 283
2002 286
2003 289
2004 292
2005 295
2006 298
2007 301
2008 304
2009 307
2010 310
2011 313
2012 316
2013 319
2014 322
2015 325
2016 328
2017 331
2018 334
2019 337
2020 340
2021 343
2022 346
2023 349
2024 352
2025 355
2026 358
2027 361
2028 364
2029 367
2030 370
2031 373
2032 376
|align="center"|
|align="left"|
|-
|align="center"|Electron rest energy
|align="center"|e/716 Joules
|align="center"|8.17948276564429*10−14
|align="center"|8.18710438*10−14 (rounded)
|align="left"|
|-
|align="center"|Light-year(miles)
|align="center"|2(42.42)
|align="center"|5884267614436.97 (rounded)
|align="center"|9460730472580800 (meters in a light-year, by definition) / 1609.344 (meters in a mile) = 8212439646337500/1397 (exact) = 5878625373183.61 (rounded)
|align="left"|{{w|42 (number)|42}} is, according to Douglas Adams' ''The Hitchhiker's Guide to the Galaxy'', the Answer to the Ultimate Question of Life, the Universe, and Everything.
|-
|align="center"|sin(60°) = √3/2
|align="center"|e/π
|align="center"|0.8652559794 (rounded)
|align="center"|0.8660254038 (rounded)
|align="left"|
|-
|align="center"|√3
|align="center"|2e/π
|align="center"|1.7305119589 (rounded)
|align="center"|1.7320508076 (rounded)
|align="left"|
|-
|align="center"|gamma(Euler's gamma constant)
|align="center"|1/√3
|align="center"|0.5773502692 (rounded)
|align="center"|0.5772156649015328606065120900824024310421...
|align="left"|In {{w|mathematics}}, the {{w|Euler-Mascheroni constant}} (Euler gamma constant) is a mysterious number describing the relationship between the {{w|Harmonic series (mathematics)|harmonic series}} and the {{w|natural logarithm}}.
|-
|align="center"|Feet in a meter
|align="center"|5/(e√π)
|align="center"|3.2815481951
|align="center"|1/.3048 (exact) = 3.280839895 (rounded)
|align="left"|
|-
|align="center"|√5
|align="center"|2/e + 3/2
|align="center"|2.2357588823 (rounded)
|align="center"|2.2360679775 (rounded)
|align="left"|
|-
|align="center"|Avogadro's number
|align="center"|69π√5
|align="center"|6.02191201246329*1023 (rounded)
|align="center"|6.02214129*1023 (rounded)
|align="left"|
|-
|align="center"|Gravitational constant G
|align="center"|1 / e(pi - 1)(pi + 1)
|align="center"|6.67361106850561*10−11 (rounded)
|align="center"|6.67385*10−11 (rounded)
|align="left"|The universal {{w|gravitational constant}} G is equal to F*r2/Mm, where F is the gravitational force between two objects, r is the distance between them, and M and m are their masses.
|-
|align="center"|R(gas constant)
|align="center"|(e+1) √5
|align="center"|8.3143309279 (rounded)
|align="center"|8.3144622 (rounded)
|align="left"|The {{w|gas constant}} relates energy to temperature in physics, as well as a gas's volume, pressure, temperature and {{w|mole (unit)|molar amount}} (hence the name).
|-
|align="center"|Proton-electron mass ratio
|align="center"|6*π5
|align="center"|1836.1181087117 (rounded)
|align="center"|1836.15267246 (rounded)
|align="left"|
|-
|align="center"|Liters in a gallon (U.S. liquid gallon, defined by law as 231 cubic inches)
|align="center"|3 + π/4
|align="center"|3.7853981634 (rounded)
|align="center"|3.785411784 (exact)
|align="left"|
|-
|align="center"|''g''0 or ''g''n
|align="center"|6 + ln(45)
|align="center"|9.8066624898 (rounded)
|align="center"|9.80665 (standard)
|align="left"|Standard gravity, or standard acceleration due to free fall is the nominal gravitational acceleration of an object in a vacuum near the surface of the Earth. It is defined by standard as 9.80665 m/s2, which is exactly 35.30394 (km/h)/s (about 32.174 ft/s2, or 21.937 mph/s). This value was established by the 3rd CGPM (1901, CR 70) and used to define the standard weight of an object as the product of its mass and this nominal acceleration. The acceleration of a body near the surface of the Earth is due to the combined effects of gravity and centrifugal acceleration from rotation of the Earth (but which is small enough to be neglected for most purposes); the total (the apparent gravity) is about 0.5 percent greater at the poles than at the equator. Randall used a letter g without a suffix, which can also mean the local acceleration due to local gravity and centrifugal acceleration, which varies depending on one's position on Earth.
|-
|align="center"|Proton-electron mass ratio
|align="center"|(e8 - 10) / ϕ
|align="center"|1836.1530151398 (rounded)
|align="center"|1836.15267246 (rounded)
|align="left"|ϕ is the {{w|golden ratio}}, or (1 + √5)/2. It has many interesting geometrical properties.
|-
|align="center"|Ruby laser wavelength
|align="center"|1 / (12002)
|align="center"|.00000069444444444444... (repeating decimal)
|align="center"|694.3 nm
|align="left"|The ruby laser wavelength varies because "ruby" is not clearly defined.
|-
|align="center"|Mean Earth Radius
|align="center"|(58)*6e
|align="center"|2343750e (exact), 6,370,973.035450887 (6370 km, 973 m, 3 cm, 5 mm, 450,887 nm) (rounded)
|align="center"|6,371,008.7 (International Union of Geodesy and Geophysics definition)
|align="left"|The {{w|Earth radius#mean radii|mean earth radius}} varies because there is not one single way to make a sphere out of the earth. Randall's value lies within the actual variation of Earth's radius. The International Union of Geodesy and Geophysics (IUGG) defines the mean radius as 2/3 of the equatorial radius (6,378,137.0 m) plus 1/3 of the polar radius (6,356,752.3 m).
|-
|align="center"|√2
|align="center"|3/5 + π/(7-π)
|align="center"|1.4142200581 (rounded)
|align="center"|1.4142135624 (rounded)
|align="left"|
|-
|align="center"|cos(π/7) + cos(3π/7) + cos(5π/7)
|align="center"|1/2
|align="center"|0.5
|align="center"|0.5 (exact)
|align="left"|The correct equation in the "Pro tip - Not all of these are wrong" section is cos(pi/7) + cos(3pi/7) + cos(5pi/7) = 1/2 as [http://math.stackexchange.com/questions/140388/how-can-one-prove-cos-pi-7-cos3-pi-7-cos5-pi-7-1-2 shown here]. If you're still confused, the functions use {{w|radians}}, not {{w|degrees (angle)|degrees}}.
|-
|align="center"|γ(Euler's gamma constant)
|align="center"|e/34 + e/5
|align="center"|0.5772154006 (rounded)
|align="center"|0.5772156649015328606065120900824024310421...
|align="left"|In {{w|mathematics}}, the {{w|Euler-Mascheroni constant}} (Euler gamma constant) is a mysterious number describing the relationship between the {{w|Harmonic series (mathematics)|harmonic series}} and the {{w|natural logarithm}}.
|-
|align="center"|√5
|align="center"|(13 + 4π) / (24 - 4π)
|align="center"|2.2360678094 (rounded)
|align="center"|2.2360679775 (rounded)
|align="left"|
|-
|align="center"|Σ 1/nn
|align="center"|ln(3)e
|align="center"|1.2912987577 (rounded)
|align="center"|1.2912859971 (rounded)
|align="left"|
|}

{{w|Pi}} is a natural constant that arises in describing circles or ellipses. As such, useful as it may be, it doesn't usually occur anywhere in an exponent. When it does, such as with complex numbers, taking the pi-th root is rarely helpful. For example, if we try to derive:

''e''π''i'' + 1 = 0

''e''π''i'' = -1

(''e''''i'')π = -1

''e''''i'' = π√(-1)

We get nowhere.

Same goes for the e-th power: e typically appears in the basis of a power (forming the {{w|exponential function}}), not in the exponent. (This is later referenced in [http://what-if.xkcd.com/73/ Lethal Neutrinos]).

The software referred to in the comic is [http://mrob.com/pub/ries/ ries], a '{{w|Closed-form expression#Conversion from numerical forms|reverse calculator}}' which forms equations matching a given number.

==Transcript==
:'''A table of slightly wrong equations and identities useful for approximations and/or trolling teachers.'''
:(Found using a mix of trial-and-error, ''Mathematica'', and Robert Munafo's ''Ries'' tool.)
: All units are SI MKS unless otherwise noted.

:{| class="wikitable"
|-
|colspan="2" align="center" | Relation:
|align="center" | Accurate to within:
|-
|align="center" | One light year(m)
|align="center" | 998
|align="center" | one part in 40
|-
|align="center" | Earth Surface(m2)
|align="center" | 698
|align="center" | one part in 130
|-
|align="center" | Ocean's volume(m3)
|align="center" | 919
|align="center" | one part in 70
|-
|align="center" | Seconds in a year
|align="center" | 754
|align="center" | one part in 400
|-
|align="center" | Seconds in a year (rent method)
|align="center" | 525,600 x 60
|align="center" | one part in 1400
|-
|align="center" | Age of the universe (seconds)
|align="center" | 1515
|align="center" | one part in 70
|-
|align="center" | Planck's constant
|align="center" | 1/(30πe)
|align="center" | one part in 110
|-
|align="center" | Fine structure constant
|align="center" | 1/140
|align="center" | [I've had enough of this 137 crap]
|-
|align="center" | Fundamental charge
|align="center" | 3/(14 * πππ)
|align="center" | one part in 500
|-
|align="center"|White House Switchboard
|colspan="2" align="center"|1/ 
π√(e(1 + (e-1)√8))
|-
|align="center"|Jenny's Constant
|colspan="2" align="center"|(7(e/1 - 1/e) - 9) * π2
|-
|colspan="3" align="center"|Intermission: World Population Estimate which should stay current for a decade or two: 
Take the last two digits of the current year

Example: 20[14]

Subtract the number of leap years since hurricane Katrina

Example:14 (minus 2008 and 2012) is 12

Add a decimal point

Example: 1.2

Add 6

Example: 6 + 1.2

7.2 = World population in billions.

Version for US population:

Example: 20[14]

Subtract 10

Example: 4

Multiply by 3

Example: 12

Add 10

Example: 3[22] million
|-
|align="center"|Electron rest energy
|align="center"|e/716 Joules
|align="center"|one part in 1000
|-
|align="center"|Light-year(miles)
|align="center"|2(42.42)
|align="center"|one part in 1000
|-
|colspan="2" align="center"|sin(60°) = √3/2 = e/π
|align="center"|one part in 1000
|-
|colspan="2" align="center"|√3 = 2e/π
|align="center"|one part in 1000
|-
|align="center"|gamma(Euler's gamma constant)
|align="center"|1/√3
|align="center"|one part in 4000
|-
|align="center"|Feet in a meter
|align="center"|5/(e√π)
|align="center"|one part in 4000
|-
|colspan="2" align="center"|√5 = 2/e + 3/2
|align="center"|one part in 7000
|-
|align="center"|Avogadro's number
|align="center"|69π√5
|align="center"|one part in 25,000
|-
|align="center"|Gravitational constant G
|align="center"|1 / e(pi - 1)(pi + 1)
|align="center"|one part in 25,000
|-
|align="center"|R(gas constant)
|align="center"|(e+1) √5
|align="center"|one part in 50,000
|-
|align="center"|Proton-electron mass ratio
|align="center"|6*π5
|align="center"|one part in 50,000
|-
|align="center"|Liters in a gallon
|align="center"|3 + π/4
|align="center"|one part in 500,000
|-
|align="center"|g
|align="center"|6 + ln(45)
|align="center"|one part in 750,000
|-
|align="center"|Proton-electron mass ratio
|align="center"|(e8 - 10) / ϕ
|align="center"|one part in 5,000,000
|-
|align="center"|Ruby laser wavelength
|align="center"|1 / (12002)
|align="center"|[within actual variation]
|-
|align="center"|Mean Earth Radius
|align="center"|(58)*6e
|align="center"|[within actual variation]
|-
|colspan="3" align="center"|Protip - not all of these are wrong:
|-
|colspan="2" align="center"|√2 = 3/5 + π/(7-π)
|align="center"|cos(π/7) + cos(3π/7) + cos(5π/7) = 1/2
|-
|align="center"|γ(Euler's gamma constant) = e/34 + e/5
|align="center"|√5 = (13 + 4π) / (24 - 4π)
|align="center"|Σ 1/nn = ln(3)e
|}

{{comic discussion}}
[[Category:Charts]]
[[Category:Math]]
[[Category:Physics]]
[[Category:Protip]]

1047: Approximations

2014-07-31T14:03:54Z

Haelbarde: /* Explanation */ Redone the proof used for cos(π/7)+cos(3π/7)+cos(5π/7)=1/2, simplifying a step (I think), but explaining each step, referencing various trigonometric proofs.

{{comic
| number = 1047
| date = April 25, 2012
| title = Approximations
| image = approximations.png
| titletext = Two tips: 1) 8675309 is not just prime, it's a twin prime, and 2) if you ever find yourself raising log(anything)^e or taking the pi-th root of anything, set down the marker and back away from the whiteboard; something has gone horribly wrong.
}}
{{incomplete|The layout is still bad. And the cos(pi/7) + cos(3pi/7) + cos(5pi/7) issue is still not explained. See discussion.}}
==Explanation==
This comic lists some approximations for numbers, most of them mathematical and physical constants. All of them work astonishingly well. There are reoccurring math jokes along the lines of, "3/5 + π/(7 – π) – √2 = 0, but your calculator is probably not good enough to compute this correctly", which are mainly used to troll geeks.

Furthermore, there are some useful approximations (which were even more useful in times before calculators) such as "pi is approximately equal to 22/7".

[[Randall]] makes fun of both of these, using rather strange approximations (honestly: you may handle 22/7, but who can calculate in a sensible way with 99^8, let alone 30^(pi^e)?) to calculate some constants that are easy enough to handle in the decimal system, and stating such "slightly wrong" trick equations, one of which ''is'' actually correct (which may astonish only those who are not familiar with cosines): cos(π/7)+cos(3π/7)+cos(5π/7) = (cos(π/7)+cos(3π/7)+cos(5π/7))*2sin(π/7)/(2sin(π/7)) = (2cos(π/7)sin(π/7)+2cos(3π/7)sin(π/7)+2cos(5π/7)sin(π/7))/(2sin(π/7)) = ( 2cos(π/7)sin(π/7) + (sin(3π/7)*cos(π/7)+cos(3π/7)sin(π/7)) - (sin(3π/7)*cos(π/7)-cos(3π/7)sin(π/7)) + (sin(5π/7)*cos(π/7)+cos(5π/7)sin(π/7)) - (sin(5π/7)*cos(π/7)-cos(5π/7)sin(π/7)) ) / (2sin(π/7)) = (sin(2π/7)+sin(3π/7+π/7)-sin(3π/7-π/7)+sin(5π/7+π/7)-sin(5π/7-π/7))/(2sin(π/7)) 
= (sin(2π/7)+sin(4π/7)-sin(2π/7)+sin(π-π/7)-sin(4π/7))/(2sin(π/7)) 
= sin(π-π/7)/(2sin(π/7)) 
= (sin(π)cos(-π/7)+cos(π)sin(-π/7))/(2sin(π/7)) 
= (0*cos(-π/7)+(-1*sin(-π/7)))/(2sin(π/7)) 
= -sin(-π/7)/(2sin(π/7)) 
= sin(π/7)/(2sin(π/7)) 
= 1/2

 cos(π/7)+cos(3π/7)+cos(5π/7) 

* Multiplying by 1 (or by a number divided by itself) leaves the equation unchanged.

= (cos(π/7)+cos(3π/7)+cos(5π/7))(2sin(π/7)/2sin(π/7)) 

* The sin(π/7) on the top of the fraction is multiplied through the original equation. 

= (2cos(π/7)sin(π/7)+2cos(3π/7)sin(π/7)+2cos(5π/7)sin(π/7)) (1/2sin(π/7)) 

* Use the trigonometric identity 2cos(A)sin(B)=sin(A+B)-sin(A-B) on the 2nd two terms ([2cos(3π/7)sin(π/7)]+{2cos(5π/7)sin(π/7)}) (1/2sin(π/7)). 

= (2cos(π/7)sin(π/7) + [sin(3π/7+π/7) - sin(3π/7-π/7)] + {sin(5π/7+π/7) - sin(5π/7-π/7)}) (1/2sin(π/7)) 

= (2cos(π/7)sin(π/7) + [sin(4π/7) - sin(2π/7)] + {sin(6π/7) - sin(4π/7)}) (1/2sin(π/7)) 
* Use the trigonometric identity 2cos(A)sin(A) = sin(2A) on the first term (2cos(π/7)sin(π/7)). 
= (sin(2π/7) + [sin(4π/7) - sin(2π/7)] + {sin(6π/7) - sin(4π/7)}) (1/2sin(π/7)) 
= (sin(6π/7) + [sin(2π/7) - sin(2π/7)] + {sin(4π/7) - sin(4π/7)}) (1/2sin(π/7)) 
= (sin(6π/7)) (1/2sin(π/7)) 

* Note that 6π/7 = (7π - π)/7 = 7π/7 - π/7 = π - π/7. 

= (sin(π - π/7))(1/2sin(π/7)) 
 
* Use the trigonometric identity sin(A - B) = sin(A)cos(B) - cos(A)sin(B). 
= (sin(π)cos(π/7) - cos(π)sin(π/7)) (1/2sin(π/7)) 
 
* Now sin(π) = 0 and cos(π) = -1. 
= ((0)cos(π/7) - (-1)sin(π/7)) (1/2sin(π/7)) 
= ((1)sin(π/7)) (1/2sin(π/7)) 
= (sin(π/7)) (1/2sin(π/7)) 
= (sin(π/7)/2sin(π/7)) 
= (1/2) (sin(π/7)/sin(π/7)) 
= 1/2

:{| class="wikitable"
|-
|align="center"|Thing to be approximated:
|align="center"|Formula proposed:
|align="center"|Resulting approximate value:
|align="center"|Correct value:
|align="center"|Discussion:
|-
|align="center"|One light year(m)
|align="center"|998
|align="center"|9,227,446,944,279,201
|align="center"|9,460,730,472,580,800 (exact)
|align="left"|998 and 698 are sexual references.
|-
|align="center"|Earth Surface(m2)
|align="center"|698
|align="center"|513,798,374,428,641
|align="center"|5.10072*1014
|align="left"|998 and 698 are sexual references.
|-
|align="center"|Ocean's volume(m3)
|align="center"|919
|align="center"|1,350,851,717,672,992,089
|align="center"|1,332*1018
|align="left"|
|-
|align="center"|Seconds in a year
|align="center"|754
|align="center"|31,640,625
|align="center"|31,557,600 (Julian calendar) 31,556,952 (Gregorian calendar)
|align="left"|After this comic was released [[Randall]] got many responses by viewers. So he did add this statement to the top of the comic page:
"Lots of emails mention the physicist favorite, 1 year = pi x 107 seconds. 754 is a hair more accurate, but it's hard to top 3,141,592's elegance." Pi x 107 is nearly equal to 31,415,926.536, and 754 is exactly 31,640,625. Randall's elegance belongs to the number pi, but it should be multiplied by the factor of ten.

Using the traditional definitions that a second is 1/60th of a minute, a minute is 1/60th of an hour, and an hour is 1/24th of a day, a 365-day year is exactly 31,536,000 seconds (the "for rent method" approximation). Until the calendar was reformed by Pope Gregory, there was one leap year in every four years, making the average year 365.25 days, or 31,557,600. On the current calendar system, there are only 97 leap years in every 400 years, making the average year 365.2425 days, or 31,556,952 seconds. In technical usage, a "second" is now defined based on physical constants, even though the length of a day varies inversely with the changing angular velocity of the earth. To keep the official time synchronized with the rotation of the earth, a "leap second" is occasionally added, resulting in a slightly longer year.
|-
|align="center"|Seconds in a year (rent method)
|align="center"|525,600 x 60
|align="center"|31,536,000
|align="center"|31,557,600 (Julian calendar) 31,556,952 (Gregorian calendar)
|align="left"|"Rent Method" refers to the song "Seasons of Love" from the musical "{{w|Rent (musical)|Rent}}." The song asks, "How do you measure a year?" One line says "525,600 minutes" while most of the rest of the song suggests the best way to measure a year is moments shared with a loved one.
|-
|align="center"|Age of the universe (seconds)
|align="center"|1515
|align="center"|437,893,890,380,859,375
|align="center"|4.354±0.012*1017 (best estimate; exact value unknown)
|align="left"|
|-
|align="center"|Planck's constant
|align="center"|1/(30πe)
|align="center"|6.68499014108082*10−34 (rounded)
|align="center"|6.62606957*10−34
|align="left"|Informally, the {{w|Planck constant}} is the smallest action possible in quantum mechanics.
|-
|align="center"|Fine structure constant
|align="center"|1/140
|align="center"|0.00714285717142857171428571, etc. (repeating 71428571)
|align="center"|0.00729735257 (accepted value as of 2011), close to 1/137
|align="left"|The {{w|fine structure constant}} indicates the strength of electromagnetism. It is unitless and around 0.007297, close to 1/137. At one point it was believed to be exactly the reciprocal of 137, and many people have tried to find a simple formula explaining this (with a pinch of {{w|numerology}} thrown in at times), including the infamous {{w|Arthur Eddington|Sir Arthur Adding-One}}.
|-
|align="center"|Fundamental charge
|align="center"|3/(14 * πππ)
|align="center"|1.59895121062716*10−19 (rounded)
|align="center"|1.602176565*10−19 (rounded)
|align="left"|This is the charge of the proton, symbolized "e" for electron (whose charge is actually -e. You can blame Benjamin Franklin [[567|for that]])
|-
|align="center"|Telephone number for the White House Switchboard
|align="center"|1/ 
π√(e(1 + (e-1)√8))
|align="center"|.2024561414 (truncated)
|align="center"|2024561414
|align="left"|
|-
|align="center"|Jenny's Constant
|align="center"|(7(e/1 - 1/e) - 9) * π2
|align="center"|867.530901981685 (approximately)
|align="center"|8675309
|align="left"|Jenny's constant comes from Tommy Tutone's tune {{w|867-5309/Jenny}}. The number 8675309 at the title text refers to the song 867-5309/Jenny as mentioned above, causing a fad of people dialing this number and asking for "Jenny". The number is in fact a {{w|twin prime}} because 8675311 is also a prime. Twin primes have always been a subject of interest, because they are comparatively rare, and because it is not yet known whether there are infinitely many of them.
|-
|align="center"|World Population Estimate (billions)
|align="center"|Equivalent to 6+((3/4 Year + 1/4 (Year mod 4) - 1499)/10) billion
|align="center"|2005 6.5
2006 6.6
2007 6.7
2008 6.7
2009 6.8
2010 6.9
2011 7
2012 7
2013 7.1
2014 7.2
2015 7.3
2016 7.3
2017 7.4
2018 7.5
2019 7.6
2020 7.6
2021 7.7
2022 7.8
2023 7.9
2024 7.9
2025 8
2026 8.1
2027 8.2
2028 8.2
2029 8.3
2030 8.4
2031 8.5
2032 8.5
|align="center"|
|align="left"|
|-
|align="center"|U.S. Population Estimate (millions)
|align="center"|Equivalent to 310+3*(Year - 2010) million
|align="center"|2000 280
2001 283
2002 286
2003 289
2004 292
2005 295
2006 298
2007 301
2008 304
2009 307
2010 310
2011 313
2012 316
2013 319
2014 322
2015 325
2016 328
2017 331
2018 334
2019 337
2020 340
2021 343
2022 346
2023 349
2024 352
2025 355
2026 358
2027 361
2028 364
2029 367
2030 370
2031 373
2032 376
|align="center"|
|align="left"|
|-
|align="center"|Electron rest energy
|align="center"|e/716 Joules
|align="center"|8.17948276564429*10−14
|align="center"|8.18710438*10−14 (rounded)
|align="left"|
|-
|align="center"|Light-year(miles)
|align="center"|2(42.42)
|align="center"|5884267614436.97 (rounded)
|align="center"|9460730472580800 (meters in a light-year, by definition) / 1609.344 (meters in a mile) = 8212439646337500/1397 (exact) = 5878625373183.61 (rounded)
|align="left"|{{w|42 (number)|42}} is, according to Douglas Adams' ''The Hitchhiker's Guide to the Galaxy'', the Answer to the Ultimate Question of Life, the Universe, and Everything.
|-
|align="center"|sin(60°) = √3/2
|align="center"|e/π
|align="center"|0.8652559794 (rounded)
|align="center"|0.8660254038 (rounded)
|align="left"|
|-
|align="center"|√3
|align="center"|2e/π
|align="center"|1.7305119589 (rounded)
|align="center"|1.7320508076 (rounded)
|align="left"|
|-
|align="center"|gamma(Euler's gamma constant)
|align="center"|1/√3
|align="center"|0.5773502692 (rounded)
|align="center"|0.5772156649015328606065120900824024310421...
|align="left"|In {{w|mathematics}}, the {{w|Euler-Mascheroni constant}} (Euler gamma constant) is a mysterious number describing the relationship between the {{w|Harmonic series (mathematics)|harmonic series}} and the {{w|natural logarithm}}.
|-
|align="center"|Feet in a meter
|align="center"|5/(e√π)
|align="center"|3.2815481951
|align="center"|1/.3048 (exact) = 3.280839895 (rounded)
|align="left"|
|-
|align="center"|√5
|align="center"|2/e + 3/2
|align="center"|2.2357588823 (rounded)
|align="center"|2.2360679775 (rounded)
|align="left"|
|-
|align="center"|Avogadro's number
|align="center"|69π√5
|align="center"|6.02191201246329*1023 (rounded)
|align="center"|6.02214129*1023 (rounded)
|align="left"|
|-
|align="center"|Gravitational constant G
|align="center"|1 / e(pi - 1)(pi + 1)
|align="center"|6.67361106850561*10−11 (rounded)
|align="center"|6.67385*10−11 (rounded)
|align="left"|The universal {{w|gravitational constant}} G is equal to F*r2/Mm, where F is the gravitational force between two objects, r is the distance between them, and M and m are their masses.
|-
|align="center"|R(gas constant)
|align="center"|(e+1) √5
|align="center"|8.3143309279 (rounded)
|align="center"|8.3144622 (rounded)
|align="left"|The {{w|gas constant}} relates energy to temperature in physics, as well as a gas's volume, pressure, temperature and {{w|mole (unit)|molar amount}} (hence the name).
|-
|align="center"|Proton-electron mass ratio
|align="center"|6*π5
|align="center"|1836.1181087117 (rounded)
|align="center"|1836.15267246 (rounded)
|align="left"|
|-
|align="center"|Liters in a gallon (U.S. liquid gallon, defined by law as 231 cubic inches)
|align="center"|3 + π/4
|align="center"|3.7853981634 (rounded)
|align="center"|3.785411784 (exact)
|align="left"|
|-
|align="center"|''g''0 or ''g''n
|align="center"|6 + ln(45)
|align="center"|9.8066624898 (rounded)
|align="center"|9.80665 (standard)
|align="left"|Standard gravity, or standard acceleration due to free fall is the nominal gravitational acceleration of an object in a vacuum near the surface of the Earth. It is defined by standard as 9.80665 m/s2, which is exactly 35.30394 (km/h)/s (about 32.174 ft/s2, or 21.937 mph/s). This value was established by the 3rd CGPM (1901, CR 70) and used to define the standard weight of an object as the product of its mass and this nominal acceleration. The acceleration of a body near the surface of the Earth is due to the combined effects of gravity and centrifugal acceleration from rotation of the Earth (but which is small enough to be neglected for most purposes); the total (the apparent gravity) is about 0.5 percent greater at the poles than at the equator. Randall used a letter g without a suffix, which can also mean the local acceleration due to local gravity and centrifugal acceleration, which varies depending on one's position on Earth.
|-
|align="center"|Proton-electron mass ratio
|align="center"|(e8 - 10) / ϕ
|align="center"|1836.1530151398 (rounded)
|align="center"|1836.15267246 (rounded)
|align="left"|ϕ is the {{w|golden ratio}}, or (1 + √5)/2. It has many interesting geometrical properties.
|-
|align="center"|Ruby laser wavelength
|align="center"|1 / (12002)
|align="center"|.00000069444444444444... (repeating decimal)
|align="center"|694.3 nm
|align="left"|The ruby laser wavelength varies because "ruby" is not clearly defined.
|-
|align="center"|Mean Earth Radius
|align="center"|(58)*6e
|align="center"|2343750e (exact), 6,370,973.035450887 (6370 km, 973 m, 3 cm, 5 mm, 450,887 nm) (rounded)
|align="center"|6,371,008.7 (International Union of Geodesy and Geophysics definition)
|align="left"|The {{w|Earth radius#mean radii|mean earth radius}} varies because there is not one single way to make a sphere out of the earth. Randall's value lies within the actual variation of Earth's radius. The International Union of Geodesy and Geophysics (IUGG) defines the mean radius as 2/3 of the equatorial radius (6,378,137.0 m) plus 1/3 of the polar radius (6,356,752.3 m).
|-
|align="center"|√2
|align="center"|3/5 + π/(7-π)
|align="center"|1.4142200581 (rounded)
|align="center"|1.4142135624 (rounded)
|align="left"|
|-
|align="center"|cos(π/7) + cos(3π/7) + cos(5π/7)
|align="center"|1/2
|align="center"|0.5
|align="center"|0.5 (exact)
|align="left"|The correct equation in the "Pro tip - Not all of these are wrong" section is cos(pi/7) + cos(3pi/7) + cos(5pi/7) = 1/2 as [http://math.stackexchange.com/questions/140388/how-can-one-prove-cos-pi-7-cos3-pi-7-cos5-pi-7-1-2 shown here]. If you're still confused, the functions use {{w|radians}}, not {{w|degrees (angle)|degrees}}.
|-
|align="center"|γ(Euler's gamma constant)
|align="center"|e/34 + e/5
|align="center"|0.5772154006 (rounded)
|align="center"|0.5772156649015328606065120900824024310421...
|align="left"|In {{w|mathematics}}, the {{w|Euler-Mascheroni constant}} (Euler gamma constant) is a mysterious number describing the relationship between the {{w|Harmonic series (mathematics)|harmonic series}} and the {{w|natural logarithm}}.
|-
|align="center"|√5
|align="center"|(13 + 4π) / (24 - 4π)
|align="center"|2.2360678094 (rounded)
|align="center"|2.2360679775 (rounded)
|align="left"|
|-
|align="center"|Σ 1/nn
|align="center"|ln(3)e
|align="center"|1.2912987577 (rounded)
|align="center"|1.2912859971 (rounded)
|align="left"|
|}

{{w|Pi}} is a natural constant that arises in describing circles or ellipses. As such, useful as it may be, it doesn't usually occur anywhere in an exponent. When it does, such as with complex numbers, taking the pi-th root is rarely helpful. For example, if we try to derive:

''e''π''i'' + 1 = 0

''e''π''i'' = -1

(''e''''i'')π = -1

''e''''i'' = π√(-1)

We get nowhere.

Same goes for the e-th power: e typically appears in the basis of a power (forming the {{w|exponential function}}), not in the exponent. (This is later referenced in [http://what-if.xkcd.com/73/ Lethal Neutrinos]).

The software referred to in the comic is [http://mrob.com/pub/ries/ ries], a '{{w|Closed-form expression#Conversion from numerical forms|reverse calculator}}' which forms equations matching a given number.

==Transcript==
:'''A table of slightly wrong equations and identities useful for approximations and/or trolling teachers.'''
:(Found using a mix of trial-and-error, ''Mathematica'', and Robert Munafo's ''Ries'' tool.)
: All units are SI MKS unless otherwise noted.

:{| class="wikitable"
|-
|colspan="2" align="center" | Relation:
|align="center" | Accurate to within:
|-
|align="center" | One light year(m)
|align="center" | 998
|align="center" | one part in 40
|-
|align="center" | Earth Surface(m2)
|align="center" | 698
|align="center" | one part in 130
|-
|align="center" | Ocean's volume(m3)
|align="center" | 919
|align="center" | one part in 70
|-
|align="center" | Seconds in a year
|align="center" | 754
|align="center" | one part in 400
|-
|align="center" | Seconds in a year (rent method)
|align="center" | 525,600 x 60
|align="center" | one part in 1400
|-
|align="center" | Age of the universe (seconds)
|align="center" | 1515
|align="center" | one part in 70
|-
|align="center" | Planck's constant
|align="center" | 1/(30πe)
|align="center" | one part in 110
|-
|align="center" | Fine structure constant
|align="center" | 1/140
|align="center" | [I've had enough of this 137 crap]
|-
|align="center" | Fundamental charge
|align="center" | 3/(14 * πππ)
|align="center" | one part in 500
|-
|align="center"|White House Switchboard
|colspan="2" align="center"|1/ 
π√(e(1 + (e-1)√8))
|-
|align="center"|Jenny's Constant
|colspan="2" align="center"|(7(e/1 - 1/e) - 9) * π2
|-
|colspan="3" align="center"|Intermission: World Population Estimate which should stay current for a decade or two: 
Take the last two digits of the current year

Example: 20[14]

Subtract the number of leap years since hurricane Katrina

Example:14 (minus 2008 and 2012) is 12

Add a decimal point

Example: 1.2

Add 6

Example: 6 + 1.2

7.2 = World population in billions.

Version for US population:

Example: 20[14]

Subtract 10

Example: 4

Multiply by 3

Example: 12

Add 10

Example: 3[22] million
|-
|align="center"|Electron rest energy
|align="center"|e/716 Joules
|align="center"|one part in 1000
|-
|align="center"|Light-year(miles)
|align="center"|2(42.42)
|align="center"|one part in 1000
|-
|colspan="2" align="center"|sin(60°) = √3/2 = e/π
|align="center"|one part in 1000
|-
|colspan="2" align="center"|√3 = 2e/π
|align="center"|one part in 1000
|-
|align="center"|gamma(Euler's gamma constant)
|align="center"|1/√3
|align="center"|one part in 4000
|-
|align="center"|Feet in a meter
|align="center"|5/(e√π)
|align="center"|one part in 4000
|-
|colspan="2" align="center"|√5 = 2/e + 3/2
|align="center"|one part in 7000
|-
|align="center"|Avogadro's number
|align="center"|69π√5
|align="center"|one part in 25,000
|-
|align="center"|Gravitational constant G
|align="center"|1 / e(pi - 1)(pi + 1)
|align="center"|one part in 25,000
|-
|align="center"|R(gas constant)
|align="center"|(e+1) √5
|align="center"|one part in 50,000
|-
|align="center"|Proton-electron mass ratio
|align="center"|6*π5
|align="center"|one part in 50,000
|-
|align="center"|Liters in a gallon
|align="center"|3 + π/4
|align="center"|one part in 500,000
|-
|align="center"|g
|align="center"|6 + ln(45)
|align="center"|one part in 750,000
|-
|align="center"|Proton-electron mass ratio
|align="center"|(e8 - 10) / ϕ
|align="center"|one part in 5,000,000
|-
|align="center"|Ruby laser wavelength
|align="center"|1 / (12002)
|align="center"|[within actual variation]
|-
|align="center"|Mean Earth Radius
|align="center"|(58)*6e
|align="center"|[within actual variation]
|-
|colspan="3" align="center"|Protip - not all of these are wrong:
|-
|colspan="2" align="center"|√2 = 3/5 + π/(7-π)
|align="center"|cos(π/7) + cos(3π/7) + cos(5π/7) = 1/2
|-
|align="center"|γ(Euler's gamma constant) = e/34 + e/5
|align="center"|√5 = (13 + 4π) / (24 - 4π)
|align="center"|Σ 1/nn = ln(3)e
|}

{{comic discussion}}
[[Category:Charts]]
[[Category:Math]]
[[Category:Physics]]
[[Category:Protip]]

Talk:1286: Encryptic

2013-11-11T14:05:18Z

Haelbarde:

The answer to the weathervane sword/ favorite apostle hint has got to be Matthias. It is 8 characters long, Matthias was the apostle chosen to replace Judas and in the Redwall series Matthias is one of the wielders of the Sword of Martin a sword that was hung on a weathervane.

It is unclear to me if these are actual hashes from Adobe file? That would be very cool... but actual file seems to have passwords in slightly different format. http://arstechnica.com/security/2013/11/how-an-epic-blunder-by-adobe-could-strengthen-hand-of-password-crackers/ [[Special:Contributions/108.162.229.211|108.162.229.211]] 09:05, 4 November 2013 (UTC) pavel

:I wouldn't call 3DES secure ... but yes, in this situation the real problem is not using per-user salt. Note that I would expect that at least some of those examples would be solvable ...any idea? Hmmm ... sword of weather vane and one of apostles might be Martin ([http://redwall.wikia.com/wiki/Sword_of_Martin]) ... -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:00, 4 November 2013 (UTC)

::It's Jonathon (for John). Not sure what it has to do with weather vane swords though... [[Special:Contributions/108.162.240.18|108.162.240.18]] 12:42, 4 November 2013 (UTC)

:Umm. "Peter" does not seem to have 8 characters, does it? Encryption method suggests it should be 8 characters, as do 8 character boxes on the right... [[Special:Contributions/108.162.229.211|108.162.229.211]] 10:43, 4 November 2013 (UTC) pavel

::I'd say "weather vane sword", "name1" and "favorite of 12 apostles" is (Saint) Peter. "Weather vane" as symbol for the rooster in the denial, and the sword Peter used when Jesus was arrested. --[[Special:Contributions/108.162.254.177|108.162.254.177]] 10:25, 4 November 2013 (UTC)

::: ... interesting that google search didn't mentioned it :-) Seems bible have too low pagerank. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:32, 4 November 2013 (UTC)

::: The 'favourite' apostle was John the Evangelist though. http://en.wikipedia.org/wiki/Disciple_whom_Jesus_loved . The other biblical clue here is 'with your own hand you have done all this' - Judith 15:10. If that's Judith1510 then the 'name and shirt number' is 'Judith15'. The TOS/earlobes clue seems to be "Spock's brain" and "Spock's (ears?)". And the Michael Jackson one is (obviously) ABC123. [[Special:Contributions/141.101.99.214|141.101.99.214]] 11:14, 4 November 2013 (UTC)
:::: Perhaps "favorite" in this case refer's to the user's favorite, not Jesus's. [[User:Yomikoma|Yomikoma]] ([[User talk:Yomikoma|talk]]) 16:13, 4 November 2013 (UTC)
:::: The Michael Jackson password should just be "ABC". (The other clue refers only to letters, and the proper song title also has only letters.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:57, 4 November 2013 (UTC)
::: Given that name1 is two blocks long, I would guess that the apostle's name is going to be eight characters long, with the second hash block being 1+seven spaces (or nulls if Adobe pads it with nulls and not spaces). But then again, as the only disciple with a name eight letters long is Thaddeus maybe not {{unsigned ip|141.101.99.214}}

:::: "St.Peter" is 8 characters, and having a "special" character (the period) makes it a good choice for passwords that might require 1 non-alphanumeric character (and ban spaces). [[Special:Contributions/141.101.99.223|141.101.99.223]] 11:47, 4 November 2013 (UTC)

:::: I think it is obvious that Name1 refers to {The user's name} + 1. I wonder though if we should be referring to one of the other 12 apostles in a different context? https://en.wikipedia.org/wiki/Twelve_Apostles_%28disambiguation%29 - [[Special:Contributions/108.162.242.11|108.162.242.11]] 18:02, 4 November 2013 (UTC)
::::: Is the "weathervane sword" referring to Redwall? I haven't read the book myself, but would it be referring to the "Sword of Martin"? [http://redwall.wikia.com/wiki/Sword_of_Martin] --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:17, 4 November 2013 (UTC)

Another article about using passwords hints from multiple users to find the passwords from the breach. http://7habitsofhighlyeffectivehackers.blogspot.com/2013/11/can-someone-be-targeted-using-adobe.html [[User:Bugefun|Bugefun]] ([[User talk:Bugefun|talk]]) 11:06, 4 November 2013 (UTC)

"Sexy earlobes" makes me think of [http://misswiu.livejournal.com/5385.html "The ABC of Aerobics"], but that would make that Shirley Clarke, and nothing in Star Trek has anything to do with Shirley that I am aware of, except possible [http://en.memory-alpha.org/wiki/Ruth Shirley Bonne as Ruth]. I skimmed a list of episode titles, but nothing jumps out at me as particularly earlobish. [[Special:Contributions/108.162.219.187|108.162.219.187]] 11:20, 4 November 2013 (UTC)

:Sexy earlobes might have something to do with Ferengi, but they didn't appeared in TOS. 141.101.99.214's idea is better. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 11:42, 4 November 2013 (UTC)

:OK, we know that "sexy earlobes" and "best TOS Episode" are the same for the first eight character, but differ after that, while "best TOS" and "sugarland" are the same after the first 8 characters. So, my guesses are : Best TOS episode: "Charlie X"; "Sexy Earlobes": Someone with the first name of "Charlie"; "Sugarland": some city in Texas (perhaps "HoustonTX") [[User:JamesCurran|JamesCurran]] ([[User talk:JamesCurran|talk]]) 16:51, 4 November 2013 (UTC)

Note that you should not ever use cipher in {{w|Block_cipher_mode_of_operation#Electronic_codebook_.28ECB.29|ECB (electronic codebook)}} mode, i.e. encrypt each block separately and independently, but use chaining. --[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 12:15, 4 November 2013 (UTC)
: And for passwords you shouldn't be using a cipher at all, but rather a hash function. (Or a cipher in one of the approved hash constructions, if you must.) And really you shouldn't be using a standard hash function, but be following best practices for passwords instead: salting the hash, using a *slow* hash function, etc. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)

Hmm, i'm rather confused about the last few on the list though. Assumedly the password for "he did the mash, he did the" would be "monster mash", but that would leave "purloined" with a password of either "monsterm" or "monster ". which doesn't make much sense. [[Special:Contributions/108.162.240.18|108.162.240.18]] 13:47, 4 November 2013 (UTC)

(charlie sheen) a1f9b2b6299e7a2b eadec1e6ab797397 sexy earlobes - He did a 2 and a half men episode on sexy earlobes
:(charlie x) a1f9b2b6299e7a2b 617ab0277727ad85 best tos episode - Star Trek has so many good episodes...
::(houstontx) 39738b7adb0b8af7 617ab0277727ad85 sugarland - Sugarland is in Houston, TX

I don't know about anyone else, but the "hints" column incidentally reminded me of {{w|Darwinian poetry|Darwinian Poetry}}... Not intentionally, I'm sure. [[Special:Contributions/141.101.98.214|141.101.98.214]] 14:46, 4 November 2013 (UTC)

Somehow I've missed out on this issue until this comic alerted me to it, but: once a few passwords are correctly guessed, does that make it straightforward to recover the encryption key, and then be able to decrypt '''all''' of them? —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 14:50, 4 November 2013 (UTC)

: Answering my own question: not really straightforward, no. 3DES is still pretty strong, and what knowing a few passwords gives you is a known-plaintext attack, which helps a little, but is by no means a giveaway. —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 15:00, 4 November 2013 (UTC)

:: Note that if blackhat used this service, he would know at least one plaintext - his own password--[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 15:05, 4 November 2013 (UTC)

:No, for calculating the encryption key of Triple DES, there is no real benefit in knowing million passwords, you would still need to brute force it. You would need to know at least 232 different passwords to make it easier but you can't do that with the leaked file (there are about 30 times less of them and moreover many of them are not unique). [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 16:08, 4 November 2013 (UTC)

Okay, so the first column is the encrypted password, the second one is the hint chosen by user. What do rectangles mean? [[Special:Contributions/173.245.53.151|173.245.53.151]] 15:28, 4 November 2013 (UTC)
:That are the fields to fill the characters in just as you do in a crossword puzzle. There are small fields at the beginning that take one character each and one large field at the end that takes one to eight characters. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 15:32, 4 November 2013 (UTC)

Water 3 is an egg group: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) . Given the length of the key, it will probably be 9-16 characters. (Crawdaunt, tentacool, and tentacruel are most likely) [[Special:Contributions/199.27.128.139|199.27.128.139]] 15:43, 4 November 2013 (UTC)
:-- which means 9dca1d79d4dec6d5 is either L, EL, or T, but I can't find a way for that to match up with any variation of "monster mash." [[Special:Contributions/173.245.55.209|173.245.55.209]] 16:15, 4 November 2013 (UTC)
:: Same problem here... Monster mash must not be correct, but it is one of the easier ones, I can't give up on it. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:35, 4 November 2013 (UTC)
::: Maybe, he did the MASH is about the book, movie or TV Show M*A*S*H instead? --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:49, 4 November 2013 (UTC)
:: Monster Mash was written by Bobby Pickett, maybe it has something to do with him? [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:38, 4 November 2013 (UTC)
::: Maybe it's not "monster mash" but just "monster". This would allow the Water-3 Pokemon to be "Cloyster". [[Special:Contributions/108.162.237.5|108.162.237.5]] 19:17, 4 November 2013 (UTC)
:::: You are having trouble counting to eight. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)
::::: You are forgetting the space. Assuming space is stored as a null character, this might actually work.[[Special:Contributions/173.245.54.29|173.245.54.29]] 01:43, 5 November 2013 (UTC)
:::::: Nobody in their right mind would encode spaces as nulls. For us to suppose that they did, we'd need to have some specific clue to that effect. [[Special:Contributions/108.162.238.5|108.162.238.5]] 09:08, 5 November 2013 (UTC)

It seems to me there are two puzzles here, if folks are right that this is not actual data from the hack. 1) Figure out Adobe's master 3DES encryption password, for the big prize. 2) figure out Randall's 3DES encryption password for this puzzle based on these hints, and knowing it will be something clever. [[User:Nealmcb|Nealmcb]] ([[User talk:Nealmcb|talk]]) 16:12, 4 November 2013 (UTC)

Trying to decode the passwords (As Randall obviously wants us to)
"with your own hand you have done all this" is from the book of Judith.
Working on decoding the others. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:13, 4 November 2013 (UTC)

8babb6299e06eb6d = password
a0a2876eb1ea1fea = 1
85e9da81a8a78adc = 57
--[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 18:10, 4 November 2013 (UTC)

Weather Vane Sword may be a reference to Game of Thrones Ascent. The "Sworn Sword", I believe is "Rona" which is also a name. [[Special:Contributions/173.245.55.216|173.245.55.216]] 18:27, 4 November 2013 (UTC)
: It needs to be a name of an apostle (as per line 7) and have 7 or 8 characters (as line 3 needs a continuation) so this leaves Matthew, Thaddeus and (Judas) Iscariot. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:57, 4 November 2013 (UTC)

If a password(or 8 character segment) is guessed can it be confirmed? Somebody should take this leaked list and create a website that presents it like in the comment and lets people guess. It can fill in the guessed ones. [[Special:Contributions/108.162.246.117|108.162.246.117]] 19:17, 4 November 2013 (UTC)

I'm putting in Mattias for the sword, name1 and disciple because of Saint Matthias [http://en.wikipedia.org/wiki/Saint_Matthias] and Redwall Matthias [http://redwall.wikia.com/wiki/Matthias] who held the Weathervane Sword (Also known as the sword of Martin [http://redwall.wikia.com/wiki/The_Sword_of_Martin] ) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)
: I've also removed "monster mash" from the list as it can't be right. Doesn't match the pokemon or the purloined clues. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)

Based on the Water-3 Pokemon hint, the only possibilities of more than 8 characters are tentacool, tentacruel, barbaracle, crawdaunt, carracosta, clauncher, and clawitzer. This would mean "9dca1d79d4dec6d5" would be l, el, le, t, ta, or r. --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 19:51, 4 November 2013 (UTC)
: This is assuming there are no characters before the actual name of the pokemon. [[Special:Contributions/173.245.55.209|173.245.55.209]] 20:30, 4 November 2013 (UTC)
: Assuming Randall has constructed this comic to have a unique answer, it can't end in r because then the clue would be ambiguous (could be clauncher or clawitzer). [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Some of these can be ruled out; it's very unlikely to be a Generation VI Pokémon (Barbaracle, Clauncher and Clawitzer) as this has only just come out and someone would have had to set up their pasword within the last few weeks. And the Pokémon that are also in the Water-1 group are probably more likely to be thought of as Water-1 than Water-3 (Crawdaunt and Carracosta). This only leaves Tentacool and Tentacruel as longer than 8 letter Water-3 only Pokémon that have been known of for a reasonable length of time; and Tentacool is no one's favourite, as the annoying multitude of them that show up whenever you try to Surf anyway makes them as reviled as Zubats in caves, if not moreso. :P Of course, the password need not be simply the Pokémon's name alone. "SexyShellder" "Cloyster1987" "Misty'sStarmie"... Who knows? [[Special:Contributions/141.101.99.252|141.101.99.252]] 01:03, 5 November 2013 (UTC)

I don't know the answer to the end either, but here's a list of people who did the Monster Mash, from Wikipedia:
* Bobby Picket (as Boris Picket)
* Garpax Records (Gary S. Paxton)
* The Misfits
* far, far too many other covers to list
And here's some synonyms for "purloined", from thesaurus.com:
* stole
* pilfered
* filched
* misappropriated
* embezzled
* burglarized
* shoplifted
* poached
* pillaged
* cheated
* pinched
* heisted
* thieved
* plundered
* appropriated
* lifted
* took
* snitched
* defrauded
* swindled
* ripped off
* made off with
Good luck with these!
—[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:31, 4 November 2013 (UTC)

What about Purloined referring to "The Purloined Letter?" When choosing hints, people, at least in my experience, tend to use word association rather than synonyms. [[Special:Contributions/173.245.55.209|173.245.55.209]]

Purloined could also be a reference to the Monster.com hack (http://www.symantec.com/connect/blogs/monster-trojan). [[Special:Contributions/108.162.237.11|108.162.237.11]] 21:00, 4 November 2013 (UTC)

Words meaning purloined that can have the listed suffixes could be '''embezzle'''/'''embezzler''' or '''scrounge'''/'''scrounger'''. Not sure if it fits to the mash clue. There was a loan shark character who would acquire things on MASH called Rizzo, it is a stretch though. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:01, 4 November 2013 (UTC)

I'm still trying to figure out how the solutions go into the spaces on the right -- it may be more obvious once the last couple clues are figured out. I suspect the ordering and numbers of clues have some sort of meaning. Why are there 5 of the 877... passwords, 2 with no clues? Why is one of the 4e18.... passwords separated from the rest? [[Special:Contributions/108.162.221.28|108.162.221.28]] 21:07, 4 November 2013 (UTC)

Could Purloined be a reference to the "Purloined Shadows" book in Elder Scrolls? --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 21:09, 4 November 2013 (UTC)
: Or 'The Purloined Payroll', a WoW quest? "Purloined in Petrograd" is also a lyric to a Decemberists song (The Bagman's Gambit). Google n-grams suggests that "Purloined Image", and "purloined documents" are a Thing. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:58, 4 November 2013 (UTC)

Purloined could be a reference to something that is known as have been stolen like a work of art, or it could be something that was stolen in an XKCD comic. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:18, 4 November 2013 (UTC)

'''EdgarPoe'''(author of The Purloined Letter)/'''EdgarPoet''' fits, but again not really anything to do with MASH. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:27, 4 November 2013 (UTC)

Water-3 pokemon (egg group) are given here: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) ...if I split off the letters of their names after the 8th letter, we see l, el, le, t, ta, and r. So the MASH item ends with one of those suffixes. [[Special:Contributions/199.27.128.167|199.27.128.167]] 21:31, 4 November 2013 (UTC)
: Can't end in 'r', because then that clue would be ambiguous. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Speaking of pokemon, could the clue to purloined have something to do with the pokemon Purrloin? http://bulbapedia.bulbagarden.net/wiki/Purrloin_(Pok%C3%A9mon) [[Special:Contributions/108.162.221.43|108.162.221.43]] 23:51, 4 November 2013 (UTC)

Is there a reason "MASH" is capitalized in the above sections? Given the context, it shouldn't be, and I still haven't given up on the password being a reference to the monster mash. That said, we can't ignore the movie/show MASH.
Also, now that I think about it: pokeMONstermash? I don't know, just throwing ideas out :P [[Special:Contributions/173.245.55.209|173.245.55.209]] 22:08, 4 November 2013 (UTC)

On [http://de.reddit.com/r/programming/comments/1pvwyf/xkcd_encryptic_analysis_at_the_link_below/ reddit] they suggest "Letterman" (which is wrong, too many letters) based on the M*A*S*H episode, "Letters". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:11, 4 November 2013 (UTC)
:...on the other hand, I wonder if an answer like "ALANALDA" would work? As in, someone who "did the M*A*S*H"... [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:13, 4 November 2013 (UTC)
:: Sadly, no. Because it needs to be more than 8 characters. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 22:17, 4 November 2013 (UTC)
::: No, I mean, "an answer of this form", not ALANALDA exactly. The Edgar Allan / Alan Alda congruence is tasty, but I can't make it work. ALLANPOE works as an answer for "Purloined" but that makes something like ALLANPOET the answer to "he did the MASH" (CRAWDAUNT is then the pokemon). But that's misspelling Alda's name for the MASH clue, doesn't quite work. There's also JAMIEFARR (Cpl Klinger) as a better answer to "he did the MASH" but then that makes JAMIEFAR the answer to "purloined" and I can't plausibly make that work. ALLANARBUS is another M*A*S*H actor, but that doesn't work at all. Can anyone come up with other/better ideas in this vein? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:31, 4 November 2013 (UTC)
::: Don't misspell Alda's name; misspell Poe's! —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 02:07, 5 November 2013 (UTC)

In crossword puzzles, a clue ending in -ed (like 'purloined') is most commonly a hint that the answer ends in 'ed'. Cross referencing that with the Pokemon clue, the solution for "he did the MASH" becomes a nine or ten letter answer ending in: -edl, -edel, -edle, -edt, or -edta (excluding -edr due to non-uniqueness), with ......edle looking the most "English-y" to me. My hunch would be something else Robert Altman or Alan Alda "did"... but nothing seems to end in 'edle.' --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 23:07, 4 November 2013 (UTC)
: There is no indication that this is a standard crossword. Most users don't respect crossword conventions when writing password hints. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
:: Aside from the title. And the text. And the fact these didn't come from users, but were just chosen for a puzzle designed by Randall, who would include just this sort of puzzler hint/in-joke in a comic about puzzles. It's moot, because no synonyms for 'stolen' make any sense with a couple other letters tacked on the end. But still, there've been worse hunches. --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 00:45, 5 November 2013 (UTC)

For all we know, his favourite Water-3 Pokémon could be Shell Smash Cloyster or Shell Smash Omastar - "OmastarSmash" as a password would fit in with "Monster mash". [[Special:Contributions/141.101.99.252|141.101.99.252]] 23:16, 4 November 2013 (UTC)
: I like that idea, although it leaves "Monster " (with a trailing space) as the answer to "Purloined", which makes no sense. But interesting idea. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 00:00, 5 November 2013 (UTC)

MonsterMash
MonsterM
TheWiscash {{unsigned|Jcupcake}}
: It's "Whiscash", and it's Water 2 (not 3) and "MonsterM" makes no sense as an answer for the hint "Purloined". But I like the idea of adding "The" in front of the pokemon answer; perhaps we're being too restrictive by looking only at pokemon with length > 8. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
::Yeah, sorry about the typo - last one would be TheWhiscash. MonsterM absolutely makes sense. http://www.hoax-slayer.com/monster-666.shtml The purloined letter here IS M [[User:Jcupcake|Jcupcake]] ([[User talk:Jcupcake|talk]]) 02:40, 5 November 2013 (UTC)

So somewhere above this someone pointed out that purloined could refer to a monster.com hack...in which case, could the first two passwords be "monster mash" and "monster"? That would allow for another previous suggestion of "OmastarSmash" Also, here's my IP Address and a remarkably not-random timestamp: [[Special:Contributions/108.162.219.195|108.162.219.195]] 01:31, 5 November 2013 (UTC)

It could also be that there are modifiers to the base. I always thought of Monster Mash as MonstaMash. This would line up closely with My Corphish written as "mycorphish" My favorite pokemon is my pikachu not just any pikachu, but mine, sort of logic. [[User:Bitassassin|Bitassassin]] ([[User talk:Bitassassin|talk]]) 01:43, 5 November 2013 (UTC)

Could "he did the mash" be referring to brewing and/or the Maillard reaction? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 05:32, 5 November 2013 (UTC)

I was just thinking that "MonsterM Ash", "MonsterM", both seem to make sense, and Ash had a few water pokemon in the water 3 egg group, so could it potentially be something along the lines of "Corphish Ash"? That was the only 8 letter water 3 pokemon he had and it fits with the other clues [[User:NewToThis|NewToThis]] ([[User talk:NewToThis|talk]]) 07:25, 5 November 2013 (UTC)

Has the idea of pokemon fusion been considered? http://pokemon.alexonsager.net/ referenced by http://kotaku.com/how-the-website-that-lets-you-create-frankenstein-pokem-510517336
--[[User:Oukansz|Oukansz]] ([[User talk:Oukansz|talk]]) 19:25, 5 November 2013 (UTC)

;Fanservice

Randall must know about this site. This comic doesn't work without people to crack the code. Should we have a fanservice category? :-) --[[User:SurturZ|SurturZ]] ([[User talk:SurturZ|talk]]) 23:32, 4 November 2013 (UTC)

I'm beginning to suspect that the wide boxes will have the key in it. Assuming he used regular DES (or DES3, for that matter, but using the same 8-byte key 3 times), it could be plausible. The 5 in the middle could be 'abcde', a lot of the other 'second halves' are numbers, and the likely known one that's not seems to be an 'x' -- which could certainly be involved in writing a hex number... problem is there's 11 of those boxes. Trying to guess what signficance the positioning of those boxes have. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:00, 5 November 2013 (UTC)

Actually, it looks like the boxes line up perfectly such that the wide bits (for second-half) will only touch the words they apply to. Order will be more or less what they are (I see the wide boxes as, in order, 1, 57, 10, Sheen, and X, with the 8 char boxes as Matthias, Password, Judith15, Charlie, and HoustonT). The next 5 are odd -- I'm not sure if we repeat the alpha/obvious password 5 times, or it's 5 chars long (abcde) and one per box. The last set is still under discussion, of course. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:20, 5 November 2013 (UTC)

;MASH capitalized
I'm currently chasing down the idea that MASH refers to [[Wikipedia:MASH-1]]. Haven't seen any name yet that looks like it might satisfy "Purloined". - [[User:BozoTheScary|BozoTheScary]] ([[User talk:BozoTheScary|talk]]) 01:56, 5 November 2013 (UTC)

I think MASH is a transcribing error. The comic doesn't have any difference on those letters as far as I can tell. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:18, 5 November 2013 (UTC)

The Purloined Letter is a Edgar Alan Poe story starring C. Auguste Dupin. Might help. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:08, 5 November 2013 (UTC)

There is also a strong association between the Monster Mash and the Mashed Potato, just throwing another idea into the ring. Also try the name BobbyPickett. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:22, 5 November 2013 (UTC)

Frankenstein did the Monster Mash in the cartoon for the song. That leads to a Pokemon card ending in 'tein' and 'frankens' for the hint Purloined. I could not find a Pokemon card that ended in 'tein' nor could I link 'frankens' with Purloined. I ran 'frankens' through Google Translate but found nothing. Also, it's the same password for the "monster mash" hint and the entry with no password hint so I think it's an obvious password (something someone can recall without a hint). Frankenstein fits that part but not the other ones. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:35, 5 November 2013 (UTC)

My $0.02: "He did the mash..." might allude to the expression "doing the math" only (intentionally) misspelled and something like "numbert" or "numb" could be the answer. --[[User:RagnarDa|RagnarDa]] ([[User talk:RagnarDa|talk]]) 04:01, 5 November 2013 (UTC)

graveyard smash fits for the first clue (though lyrically incorrect). Gives smash as second block, but cannot find association between graveyard and purloined. [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:08, 5 November 2013 (UTC)

If we take The Monster Mash for the first answer, it could be written as TheMonsterMash or The Monster Mash, giving either TheMonst erMash or The Mons ter Mash as the two blocks. This gives either Themonst or The Mons as Purloined and either ermash or ter Mash for second block of pokemon answer. Suggestions? [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:15, 5 November 2013 (UTC)
: Only problem is that the word "the" is the last word of the hint.[[Special:Contributions/108.162.237.117|108.162.237.117]] 04:51, 5 November 2013 (UTC)

I know that the water-3 group is not the same, but it seems like an odd coincidence that another pokemon group is the "monster" group. --[[User:Natnee|Natnee]] ([[User talk:Natnee|talk]]) 04:44, 5 November 2013 (UTC)

There is a Scooby Doo comic book story titled "[The Purloined Poe-M](http://scoobydoo.wikia.com/wiki/The_Purloined_Poe-M)", which has an odd similarity to the "MonsterM" possible password. This would leave the pokemon password ending "ash" who, of course, is a pokemon character ... which makes no sense in that place. [[Special:Contributions/199.27.128.83|199.27.128.83]] 05:51, 5 November 2013 (UTC)

Here's one that fits: 
facemash4077 (Combination of facemash by zuckerberg and M*A*S*H) 
facemash (Site made by Zuck in The Social network.) 

Maybe facmashklinger.. The eggklinger being a water-3 Pokemon? [[Special:Contributions/108.162.215.39|108.162.215.39]] 06:14, 5 November 2013 (UTC)rbnm

[http://en.wikipedia.org/wiki/John_Orchard John Orchard] played in M*A*S*H and also was in the movie "The Letter" [[Special:Contributions/108.162.250.8|108.162.250.8]] 05:02, 6 November 2013 (UTC)

;Working Backwards
I'm attempting to take a different tact, by trying to find the key itself. I'm assuming its something easy to guess. I've tried the top 100 Adobe passwords (you can get them [http://stricture-group.com/files/adobe-top100.txt here]) using the following bash script (testing the word "matthias", as this one seems pretty certain):

<code>
while read p; do echo -n $p\: && echo -n "matthias" | openssl enc -e -des-ede3 -nosalt -nopad -pass pass:$p | xxd -p; done < passwords.txt
</code>

For this to work, I pre-processed the top 100 passwords file with:

<code>
cat adobe-top100.txt | cut -c51- > passwords.txt
</code>

…and then trimmed the cruft with a text editor (leading text paragraph and table headers). So far no luck; perhaps someone with more time on their hands can try some obvious XKCD-related passwords (I've tried XKCD, xkcd, xkcd.com, randall, rmunroe, encryptic, and Encrytic) and see if the encrypted version(s) match up with what we have here. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:27, 5 November 2013 (UTC)
:I should mention that I've also tried OpenSSL's des-ede mode and des-ecb, as Im not sure if Randall used one, two, or three key mode. I'm also assuming the key has been generated from the password using OpenSSL's default key generation method, any of with I suppose could be incorrect. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:39, 5 November 2013 (UTC)
:: Nice work. Note that the puzzle is very specific about using "block mode 3-DES" (usually called "ECB"). DES keys are actually 56 bits; each of the 8 bytes has odd parity (the number of 1 bits is odd). From [https://en.wikipedia.org/wiki/Data_Encryption_Standard wp], "Bits 8, 16,..., 64 are for use in ensuring that each byte is of odd parity." As a wild guess, I'd suggest that, if Randall chose a readable 8-ASCII-character passphrase, he also selected only characters that would make the parity bit zero (so that the result was ASCII). That is, <code><nowiki>[ #%&)*,/12478;=>@CEFIJLOQRTWX[]^abdghkmnpsuvyz|]</nowiki></code>. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:34, 5 November 2013 (UTC)
::: Uh, hold one. Read the "Explanation" section above. It's clear that the hashes are not real, so brute-forcing the key isn't going to work. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:48, 5 November 2013 (UTC)
:::: Just to note, there are actually three options for keys in TripleDES: having three independent keys (K1, K2, K3), having two independent keys (K1, K2, K1), or using a single key (K1, K1, K1). When run in ECB mode, OpenSSL calls these '''des-ede3''' and '''des-ede''' for options 1 and 2 (option 3 is for backwards compatibility with DES, and can be run using just '''des-ecb'''). See [http://en.wikipedia.org/wiki/Triple_DES#Keying_options Triple DES - Keying Options] for details. In addition, the password and the key are two different entities -- typically the password is run through a keying algorithm first (commonly [http://en.wikipedia.org/wiki/PBKDF2 PBKDF2] for 3DES), so there is no need to select password characters based on parity patterns. All of which is moot now that we know that the data isn't in fact TripleDES encrypted in the first place. I'm actually disappointed in Randall now :P. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 19:01, 5 November 2013 (UTC)

I Hadn't seen it mentioned yet, but Monster Mash was written by Robert George Pickett (http://en.wikipedia.org/wiki/Bobby_Pickett), Whose last name goes closely with the second clue, Purloined, which means "stolen". I can't make it work, but I figured it was worth pointing out. (Nov 5th 1:26 pm utc ) [[Special:Contributions/173.245.56.24|173.245.56.24]] 13:27, 5 November 2013 (UTC)
: It's a good connection. Maybe we should reorganize the discussion and start a list of "interesting ideas we can't quite make work" in the hopes that someone else has an insight. Edgar Allan / Alan Alda, Pickett / "Pick it", Klinger / Kingler, etc. Most of these are just manifestation of the human brain's ability to find patterns even in random coincidence, of course, but one of them might be on the right track. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

Just quick thoughts.
I feel like Cpl klinger and the water type kingler is too solid a connection to ignore even though I can't really use it.
Kingler was owned in the series by Ash.
Ash is a three letter word and the last three letters of the phrase monstermash.
Monsterm=8 letters so the first block ash=3 letters in the second block.
Monsterm is about the monster.com thing, therefore purloined. It's a double reference, the .co has been purloined from the purloined website.
Then blastoise -3, or rather blastois3 - 3 (mocking the common password meme of replacing letters with numbers)
So the last password, which is super hard to guess and well chosen even with the clue is, blastoisash? It's a feasibly memorable password that would not be quickly forgotten by a pokemon fan while still being hard to guess.
Can you think of a way to check it? Maybe go into the old command line xkcd and try it as a password? (From a contributor to my talk page) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 13:52, 5 November 2013 (UTC)
: That's really a stretch. ".co is purloined from monster.com?" really? The answer will be far more obviously correct... once we figure it out. Look at the other answers, for example. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

;another quick idea for monster mash

It could be deflection. Maybe whoever put it in was paranoid. Or just dumb. Or who knows.

But, there is a pokemon that's in the monster/water(-1) hybrid group called Marshtomp.

Monster mash, mashed (ie anagrammed) can give us all but the P out of that... which is fine, as it's a 9-letter name.

Thus we have E, N and S left over (and indeed a further T, H, E), which could become overall, e.g, Marshtomens (...Marshtomethens? Or w/e), which you can split up as you like to represent something which has been stolen (personally). Possibly in german slang or something. It doesn't have to be a direct thesaurus link, it could well be complete misdirection (on Randall's behalf, or that of his notional Adobe user), same as for the pokemon.

And for the pokemon itself, it could well be "Marshtomp3" ;)

Also, don't forget about reversed words and so-on.

Heck, I've used very personal and/or random things (like, maybe two or three people in the world may recognise it in connection with me, and it's not online, at least not anywhere it can be found - basically it's just in my head and dies with me), reversed, with numbers substituting random characters, as passwords before. That covers each individual base in just one PW...

Now we just have to start feeding the guesses into a hash engine and try to figure out, maybe brute force, what the original key was. Knowing almost all of the other answers already makes this far, far easier for those who may have the facility to run the tests already. [[Special:Contributions/141.101.99.213|141.101.99.213]] 14:54, 5 November 2013 (UTC)
: This is not a real excerpt from the password file, this is a puzzle which Randall made up. Therefore, the answer to the last group will not be random, and it will not be a stretch. It will be obvious (as obvious as the previous ones)... once we figure out the catch. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

FWIW, Eve Online also features a "Purloined Sansha Codebreaker". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:16, 5 November 2013 (UTC)

I agree that the solution has to be obvious - especially after its revealed. If this were a crossword puzzle, then the clues like Purloined might be followed by a question mark. Purloined? a cat that is loined - a cat that is covered with cloths? Puss in boots? Or something along those lines... [[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

purloined=phished (Corphish)? {{unsigned ip|108.162.216.227}}

i wonder if the link between the last three clues is more like a cryptic crossword puzzle---for instance, --purloined= heisted; the other clues reading it as he/is/ted...?--[[User:Wwd|Wwd]] ([[User talk:Wwd|talk]]) 22:40, 5 November 2013 (UTC)

I wonder if the pokemon could be the name of an ubuntu release, per "Not Really Into Pokemon" at http://xkcd.com/178/ --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 22:45, 5 November 2013 (UTC)

You could also abbreviate Robert Pickett's name (the co-writer of Monster Mash) as "Rob Pickett" which goes even more with purloined (the first 8 letters are now "Rob Pick"). [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:21, 6 November 2013 (UTC)

Beings that "did the mash" according to the song http://www.lyricsondemand.com/onehitwonders/monstermashlyrics.html : my monster, the ghouls, Igor, Igor's baying hounds, the coffin-bangers, "The Crypt-Kicker Five", you. Zombies, Wolf Man, Dracula/Drac, and Boris were also mentioned, but they didn't do the mash. Hope that helps someone (doesn't help me). [[User:DPWally|DPWally]] ([[User talk:DPWally|talk]]) 23:05, 6 November 2013 (UTC)

;Capitalization hints?

I have no idea who first put the capital letters in "MASH" and "Purloined" in the transcript (and I don't want to check), but now that I've gotten rid of the second (after somebody else got rid of the first), I want to record them here for the record. Possibly Randall put them in and was feeding us clues (so ''MASH'' the book or movie, and ''Purloined'' a title such as Poe's). I consider this unlikely (after all, I removed one of these capitalizations), but the possibility should be recorded. —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 01:17, 6 November 2013 (UTC)

I can't be a coincidence that this comes up as the top google news search for 'purloined:' http://www.theregister.co.uk/2013/11/05/adobe_users_purloined_passwords_were_pathetic/ {{unsigned ip|108.162.246.120}}

"38a7c9279cadeb44 9dca1d79d4dec6d5 he did the mash, he did the": Ministermash (sounds like monster mash)
"38a7c9279cadeb44 purloined": Minister (based on the character Minister D-, who stole the letter in the Edgar Allen Poe story)
"a8ae5754a2b7af7a 9dca1d79d4dec6d5 fav water-3 pokemon": OmastarSmash (Shell Smash Omastar)
So,38a7c9279cadeb44 = minister, 9dca1d79d4dec6d5 = mash, a8ae5754a2b7af7a = omastars
04:07, 6 November 2013 (UTC)
:Probably one of the best complete theories I've heard [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:26, 6 November 2013 (UTC)

I suggest "alligato" (a form of Latin ''alligatus'', perfect passive participle of ''alligo'' "bind up"), and "alligator" (Referencing "Land of 1000 Dances"). [[Special:Contributions/199.27.128.62|199.27.128.62]] 05:37, 6 November 2013 (UTC)

I think there is a transcribe mistake. 
Instead of "fav water-3 pokemon" 
Could it be "fay water-3 pokemon" 
Look at the Y and V letters in the non-chopped letters above. I think it is a Y and not a V. 
{{unsigned ip|108.162.215.51}}
*About the Pokemon, is it possible everyone's ignoring a much simpler explanation? Every Pokemon game begins with a choice of one of the three starter Pokemon, each of which have an evolutionary line of three Pokemon. In first gen, if your "favorite [is] water [from the] 3 Pokemon", then you'll be using Squirtle, followed by Wartortle and Blastoise. 2nd gen: Totodile, Croconaw, Feraligatr. 3rd gen: Mudkip, Marshtomp, Swampert. 4th gen: Piplup, Prinplup, Empoleon. Perhaps the answer uses one of these, or some combination of them? --Anon 08:57, 6 November 2013 (UTC)

Boris Blacher wrote an opera based on 'The purloined letter' This may fit with Bobby 'Boris' Pickett who sang Monster Mash [[User:YellowYeti|YellowYeti]] ([[User talk:YellowYeti|talk]]) 11:11, 6 November 2013 (UTC)

The "Boris" in "Boris Pickett" is a reference to Boris Karloff. (In his other work, Pickett doesn't use that name.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 12:36, 6 November 2013 (UTC)

An alternative tack: how about Barbaracle for the Pokemon, BarbaraC(Jordan) for purloined and Barbara Clark - famous for doing Monster Mash-up novels. Does Barbara Jordan have some purloined link with watergate? {{unsigned ip|108.162.231.16}}
No, because the pokemon has a different starting string as the other two. --[[Special:Contributions/199.27.128.119|199.27.128.119]] 13:48, 6 November 2013 (UTC)

I think it is not coincidence that it is the last one that you can't solve. It may be an experiment by Randall to see if people can find a solution for a puzzle that doesn't make any sense. That said, if it does have a solution, it should not be "monstermash" since that is too close to the clue. If that was the password, everyone could guess it easily from the clue. It has to be one level "removed" from those words, guided by the clues for the matching passwords. The point of the post was that using unsalted crypt in the passwords allows you to combine clues, right? [[Special:Contributions/108.162.219.201|108.162.219.201]] 13:42, 6 November 2013 (UTC)

Not an answer, but maybe an approach: Look at it from the "what piece of information is Randall trying to tell us?" angle. In the first few puzzles, he teaches us the rules of the game. We disambiguate clues by later ones, which we can only do because of the missing salts. For example, the "name and jersey number" just tells us the format of the answer to the previous clue about Judith 15:10. Otherwise, there would have been no way to guess that exact string without the space and colon. Also, "Charlie X" and "Charlie Sheen" demonstrate that spaces are used in a "fair" way. I would not expect a trailing space on a password, for example. So what about the Pokemon then? The first half of the crypt for the Pokemon isn't used anywhere else. The easiest interpretation I can come up with is that this is just trying to restrict the common second part of the word to letters from the list of Water-3 Pokemon. Let's assume it wasn't made very difficult, so take just 'el', 'le', and 'l' from the Water-3-only group on bulbapedia. Then the puzzle is this:

something related to 'monster mash': 8 letters plus the ending 'el', 'le', or 'l'
something related to 'purloined' or related to 'letter': the same 8 letters, minus the ending
pokemon: completely unrelated, just chosen to have a well known list of 9 or 10 letter words to restrict search space for first line

I suck at crosswords, but can someone solve this restated version? There can't be that many 8 letter words that also make a word with 'el', 'le', or 'l' added to them? 15:23, 6 November 2013 (UTC) {{unsigned ip|108.162.219.201}}

: Not to insult your reasoning, which is entirely correct, but I believe your restatement is *exactly* the puzzle that (reasonable) people have been working on (and failing to solve) since Monday. As a long-time mystery hunter, I'd like to suggest the opposite: the continued failure to find some reasonable solution to the puzzle as stated above implies that *at least one* of the assumptions above is wrong. (For the record, I'd broaden your first to "...related to 'monster mash' or the show/film M*A*S*H", but again, that's the assumption we *have* been making.) So I'm especially interested in ideas *different* from the above, at this point, although not necessarily throwing out the bathtub, baby and all. Probably there's a fundamentally different way to read the first clue, or the second, or the third. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: Not insulted at all, just glad if I summarized it correctly, since I was late to the party. Maybe this helps others bootstrap. As requested, a slightly alternate view for clue 1: the word "mash" may not be part of the answer, since it appears in the clue. This means the direct answer to the clue is "monster" and has nothing to do with the song at all. The password could just be the name of a monster that is formed from something purloined plus an short ending. The endings we're already considering make nice monster names.[[Special:Contributions/108.162.219.198|108.162.219.198]] 19:54, 6 November 2013 (UTC)

:::I appreciate the summary, it helped me come up with my "keyboard mash" proposed solution, which you can see below" [[Special:Contributions/108.162.221.16|108.162.221.16]] 21:51, 6 November 2013 (UTC)

Looking at some word lists at http://www.litscape.com/words/ending_with/l/9_letter_l_end_words.html , this doesn't seem to be leading anywhere good. Can someone fix my logic? [[Special:Contributions/108.162.219.201|108.162.219.201]] 15:33, 6 November 2013 (UTC)

Not sure if anyone else has pointed out yet, but there is a pokemon named purrloin http://bulbapedia.bulbagarden.net/wiki/Purrloin_%28Pok%C3%A9mon%29 . That seems like far too much of a coincidence to not be related. [[Special:Contributions/173.245.52.211|173.245.52.211]] 16:17, 6 November 2013 (UTC)
: We'll add it to the long list of suspicious coincidences. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: I don't believe the hints can be related. Note that the Pokemon's name shares zero characters with the answer to the 'purloined' clue, so they are not linked via the same password. Any semantic link is inconsistent with these being password hints from separate (imaginary) users. Maybe Randall subconsciously (or via google) went from purloined to Purrloin to names of Pokemon. [[Special:Contributions/108.162.219.198|108.162.219.198]] 19:20, 6 November 2013 (UTC)

a stretch.. but maybe a starting point?
bootlegd purloined
bootlegd ash he did the..
???whisc ash fav-3
[[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

;Hash collision

Maybe the last clues could be intended to be a hash collision? With 64-bit blocks that seems unlikely, but maybe it's a trick?
[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:29, 6 November 2013 (UTC)
:Finding the probability of a collision amounts to the birthday problem. Assuming the hash function gives all 2^64 hash values with equal probability and there are 153 million unique message blocks (probably right within an order of magnitude), we have:
:
: <pre>Pr[collision] = 1 - exp(-153000000^2/(2*2^64)) = 0.000634</pre>
:
: So the probability of a hash collision from different passwords is still quite low, even with such a large number of passwords. So it's worth assuming that all the identical hash blocks are from the same message, and keep looking for the poke-mash password.
: BTW, getting a 50% chance of a collision requires about <tt>sqrt(-2^65*ln(.5))</tt> = 5 billion unique passwords.
:[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:46, 6 November 2013 (UTC)

'''Explanation for the last 3 - Keyboard Mash'''

"He did the mash, he did the" keyboard mash
ASDFGHJK - L

"purloined" letter, as in one letter from the home row
ASDFGHJK

Then the third one is TENTACOO - L
[[Special:Contributions/108.162.221.16|108.162.221.16]] 21:45, 6 November 2013 (UTC)
:Purloined seems like a stretch. On the other hand, 'asdfghjkl' is the 56th most common password in the real adobe data, so perhaps you're on to something. [[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 22:08, 6 November 2013 (UTC)
::I don't know, I feel like purloined has got to be a reference to the Poe story. The pun that letter means single character rather than item of correspondence is cute and funny. [[Special:Contributions/108.162.221.16|108.162.221.16]] 22:30, 6 November 2013 (UTC)
:I like this explanation --[[User:Lackadaisical|Lackadaisical]] ([[User talk:Lackadaisical|talk]]) 22:28, 6 November 2013 (UTC)

: This get's my vote. There's no reason for the "mash" password to be repeated twice in the puzzle with no clue for one of them except to say "this is a commonly used password" (as shown by the abc and password1 entries). Common password with an l (or el etc.) missing from the end, a purloined letter(!), plus "mash" as a clue is oblique but not crazyily so [[Special:Contributions/141.101.99.223|141.101.99.223]] 17:37, 7 November 2013 (UTC)

:: I agree with the repetition part. Looking at the adobe top 100 passwords http://stricture-group.com/files/adobe-top100.txt I was hoping that 'asdfghjkl' was 2/5 as common as 'abc', based on the number of repetitions. It is actually more common, but at least it is on the list. I also think it is by far the best fit if choosing only from that list. Also, maybe Randall used another source material where it is less common than 'abc.' [[Special:Contributions/173.245.52.158|173.245.52.158]] 13:13, 8 November 2013 (UTC)

: I think this is the best wrong answer yet. That is, I don't see how you can plausibly clue "ASDFGHJK" with "purloined" (that is, the hint doesn't work on its own, it requires the rest of the puzzle to make sense at all, which is against the rules of the puzzle). But it's a good story. Definitely wrong, but wrong in a really interesting way, and the most interesting wrong answer yet. ;) [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 19:41, 7 November 2013 (UTC)

:: I disagree. Even without the context of the rest of the comic, ASDFGHJKL is such a common password that it makes sense to imagine a hint that simply refers to a variation on it. In the same way, I can imagine someone using "purloined" to hint at a password of PASSWOR. Of course, with only 7 letters that wouldn't work for the comic. You would need a common 9 letter password to make a workable puzzle in the comic, and it's hard to think of anything better than ASDFGHJKL in that context. I appreciate the symmetry of the reference as well, in The Purloined Letter, the trick is that the police are all overthinking things and overlooking the obvious. [[Special:Contributions/108.162.221.16|108.162.221.16]] 21:58, 7 November 2013 (UTC)
::: I don't like "purloined" as a hint for "ASDFGHJK" one bit ("christmas" [that is, "noel"], "eight home", "elephant sneeze with a holiday", or any number of other phrases would be much better if that's what you were trying to clue), but it is the best thing so far. Maybe if we pencil it in, Randall will be motivated to let us know what he *really* meant. (Or apologize for "purloined" being lame.) [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 19:32, 8 November 2013 (UTC)

Why the restriction on the ending of the Pokemon to el, l, etc? There could be an adjective before (i.e. redkingle), so the Pokemon name could extend more into the second frame. The adjective might be some abreviated synonym for favorite, or whatever fav (or fay) stand for. [[Special:Contributions/108.162.215.34|108.162.215.34]] 22:07, 6 November 2013 (UTC)rbnm

;The last clue

Regarding it being actually Fay water-3 pokemon, have a look at this: http://www.serebii.net/e-reader/battle/08.shtml

The trainer is named Fay, and has a Starmie, which is a Water-3 Pokemon according to http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group)

However, its only 7 characters. Not sure if it means anything, but just putting it out there.

EDIT: FayStarmie takes us to 10, leaving 9dca1d79d4dec6d5 meaning 'ie'

EDIT 2: I believe there is a Fay in Pokemon X and Y, but I can't find any information on her. Also Fay could refer to fairy, which is the new type added in Pokemon X and Y, but there doesn't seem to be any fairy Water-3 Pokemon, or any pokemon that reside in both groups. [[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 00:24, 7 November 2013 (UTC)

It's not "FAY", it's "FAV". Check how "FAVORITE" is written in the middle of the picture, and look at the Y's. The vertex is clearly below the mid-point of A, which is where it is in Y. --[[Special:Contributions/199.27.128.119|199.27.128.119]] 09:45, 7 November 2013 (UTC)

;Another theory on last part
Numbers and dates. Other passwords had numbers, why not this one?

A birthday is an easy thing to remember, so it's bound to be someone's password. So lets say a birthday was August 25, 1962. One can write that as august2562, which just so happens to be when Monster Mash was released, as per Wikipedia. In addition, August is quite similar to C. Auguste Dupin, from The Purlioned Letter. Lastly, one can add the Pokedex number of the Pokemon to the end of its name, but Poliwrath62 is too long, and is a water 1 Pokemon, not water 3.

This theory doesn't fit perfectly, but I haven't seen it posted yet. Maybe it'll give someone that eureka moment...[[Special:Contributions/199.27.128.188|199.27.128.188]] 10:11, 7 November 2013 (UTC)

On the "purloined" and "monster mash" things: this is an incomplete theory but might give someone else an idea. Poe's "The Purloined Letter" contains this line: "He is the monstrum horrendum, an unprincipled man of genius." So perhaps the "purloined" clue is a reference to this line somehow. "Monstrum horrendum" is Latin for "horrendous monster" (although in Latin "monster" technically means "something to be pointed out and marvel at"). So if the password is "monsterm", this could be a misspelling of "monstrum"; if it's "monster " it could be a translation, though that begs the question as to why it ends with a space. [[User:Darthkiwi|Darthkiwi]] ([[User talk:Darthkiwi|talk]]) 15:50, 7 November 2013 (UTC)

Could purloined be a pun for a stolen persistant URL? [[Special:Contributions/199.27.128.113|199.27.128.113]] 18:32, 7 November 2013 (UTC)rbnm

I did some copypasting with v's y's and a's in paint and i now know for certain that it's fav pokemon, not fay. Althogh i did think about fay referring to fairy. But i now find this very unlikely. Personally i think it has some relation to water-3 egg group because that is just that obvious to any pokemon player, although it may be some weird distant connection. i usually do a few cryptic things with the password that i can probably remember but makes it as hard as possible to guess. so i might make something like that my hint if my favorite pokemon trainer used a pokemon once who shared the same colors as a water 3 pokemon. so my guess is that it is water-3 but maybe not a pokemon directly in it. [[Special:Contributions/108.162.231.53|108.162.231.53]] 18:57, 7 November 2013 (UTC)

I'm wondering if the mash comment could refer to the Mashed Potato dance. From the wikipedia page about said dance, a slightly modified version of it was one of the dances that people danced to the Monster Mash. {{unsigned ip|108.162.219.35}}

---

One technique for creating strong passwords is to take the first letter of each word in a passage from a book/movie quote/song/etc. as seen at http://www.mrsware.com/2/post/2013/06/passwords-revisited.html - "I was working in the lab late one night" would turn into "iwwitllon". If we take the next lyrics from the monster mash after "he did the", we get 'mmhdtmiwags'. The first eight words of The Purloined Letter would spell 'apjadoge'. Not sure how helpful this is.

Another thought is that in the story of The Purloined Letter, the letter is hidden in plain sight. Also, the story starts out with "Nihil sapientiae odiosius acumine nimio" - Nothing is more hateful to wisdom than excessive cleverness, which may be relevant here.

Finally, I was thinking about punctuation. "mon*m#" could be pronounced like "mon-star-m-hash". [[Special:Contributions/199.27.130.146|199.27.130.146]] 23:02, 7 November 2013 (UTC)

It's also possible that Monster Mash means combining (mashing) the names of two Pokemon. I believe you guys have only been looking at single pokemon names. Regarding Purloined, could that word be the opposite mashup? So a Pokemon called (I'm making this up, don't hate on me) Purfect and another one named Charloined could mash into Purloined or Charfect. {{unsigned|Mirrordude}}
: I don't think that is 'legal' in the rules that everyone is assuming for this game. Note the (simulated) user who picked the pokemon clue is unaware that someone else used monster mash in their clue. This is addressed in more detail above. [[Special:Contributions/173.245.52.158|173.245.52.158]] 13:00, 8 November 2013 (UTC)

'''Not 1, but 3 Pokemon'''

What if the Pokemon clue wasn't a single favorite from the water-3 group, but a favorite group of three water type Pokemon? This is less intuitive from the hint, but do people really pick out favorites from egg groups rather than types? [[Special:Contributions/173.245.54.8|173.245.54.8]] 01:41, 8 November 2013 (UTC)
: For example, "PokeBroKing" would represent a family of three water Pokemon (Slowpoke, Slowbro, Slowking), and "ING" would be the second hash to use with MonsterMash and the blank hint. [[Special:Contributions/173.245.54.8|173.245.54.8]] 03:18, 8 November 2013 (UTC)

'''Two Word Monsters?'''

What if the most simple derivation summarized above is correct, but with two minor changes:
1) he did the... refers to 'monster' not 'monster mash' since 'mash' appears in the clue (I asked about this above, but nobody commented)
note that this needs to be a password that you wouldn't guess if you don't also have the purloined clue, so not the word 'monster' or 'monster mash' itself
2) assume there is a space making two words in the first 8 characters of the answer to this clue
Then the search for 8 character words for 'purloined' would actually be the search for 8 character phrases, like so:
purloined -> letter -> 'post man'
monster -> 'post manle' (ok, that's not a monster, but for the correct 'purloined' phrase it would be)
This should fix the problem where you can't add short endings to 8 character words and make another word. I think it is easier to add these endings to shorter words. I also like the form of this puzzle, because it would be a logical difficulty progression after the 'Charlie X' thing above.
[[Special:Contributions/173.245.52.158|173.245.52.158]] 12:52, 8 November 2013 (UTC)

I think you're on the wrong track. The answer for the last one could be "Password|Smash" or "Password|Mash" (rhymes with MonsterMash) capitalization unknown, of course. "OmastarS|mash" or "Omastar |Smash" for the Pokemon. Purloined, of course would be the "Password" itself, self-referential. {{unsigned ip|108.162.219.23}}

;Who did the mash?

It's right in the lyrics: "my monster". The obvious corresponding answer to the Pokémon clue is to prepend the Pokédex number to the name, eg, "099kingler". It could also be, say, "99 kingler" or "91cloyster", which is unfortunate because we'd prefer a unique solution. Even sadder is that this leaves us with "my monst" for the password with the purloined clue, and that really just makes no sense at all. --[[Special:Contributions/108.162.219.38|108.162.219.38]] 22:55, 8 November 2013 (UTC)

I might have missed it - did we figure out what the boxes on the right are for? They might be a key to the puzzle. [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 10:57, 10 November 2013 (UTC)
:The boxes are just what people have been doing with the fact that each block represents up to 8 characters. You'll notice the rectangles made up of smaller boxes contain 8 boxes. These are only for the passwords which contain two blocks (thus having 9-16 characters). The smaller rectangles not subdivided then tell us that there is 8 or less characters inside it. [[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 14:05, 11 November 2013 (UTC)

Purrloin is the name of a Pokemon. I would suggest checking Water-3 Pokemon that can breed with Purrloin, but none can. Perhaps another connection? {{unsigned ip|173.245.54.79}}

Talk:1286: Encryptic

2013-11-07T00:25:09Z

Haelbarde:

The answer to the weathervane sword/ favorite apostle hint has got to be Matthias. It is 8 characters long, Matthias was the apostle chosen to replace Judas and in the Redwall series Matthias is one of the wielders of the Sword of Martin a sword that was hung on a weathervane.

It is unclear to me if these are actual hashes from Adobe file? That would be very cool... but actual file seems to have passwords in slightly different format. http://arstechnica.com/security/2013/11/how-an-epic-blunder-by-adobe-could-strengthen-hand-of-password-crackers/ [[Special:Contributions/108.162.229.211|108.162.229.211]] 09:05, 4 November 2013 (UTC) pavel

:I wouldn't call 3DES secure ... but yes, in this situation the real problem is not using per-user salt. Note that I would expect that at least some of those examples would be solvable ...any idea? Hmmm ... sword of weather vane and one of apostles might be Martin ([http://redwall.wikia.com/wiki/Sword_of_Martin]) ... -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:00, 4 November 2013 (UTC)

::It's Jonathon (for John). Not sure what it has to do with weather vane swords though... [[Special:Contributions/108.162.240.18|108.162.240.18]] 12:42, 4 November 2013 (UTC)

:Umm. "Peter" does not seem to have 8 characters, does it? Encryption method suggests it should be 8 characters, as do 8 character boxes on the right... [[Special:Contributions/108.162.229.211|108.162.229.211]] 10:43, 4 November 2013 (UTC) pavel

::I'd say "weather vane sword", "name1" and "favorite of 12 apostles" is (Saint) Peter. "Weather vane" as symbol for the rooster in the denial, and the sword Peter used when Jesus was arrested. --[[Special:Contributions/108.162.254.177|108.162.254.177]] 10:25, 4 November 2013 (UTC)

::: ... interesting that google search didn't mentioned it :-) Seems bible have too low pagerank. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:32, 4 November 2013 (UTC)

::: The 'favourite' apostle was John the Evangelist though. http://en.wikipedia.org/wiki/Disciple_whom_Jesus_loved . The other biblical clue here is 'with your own hand you have done all this' - Judith 15:10. If that's Judith1510 then the 'name and shirt number' is 'Judith15'. The TOS/earlobes clue seems to be "Spock's brain" and "Spock's (ears?)". And the Michael Jackson one is (obviously) ABC123. [[Special:Contributions/141.101.99.214|141.101.99.214]] 11:14, 4 November 2013 (UTC)
:::: Perhaps "favorite" in this case refer's to the user's favorite, not Jesus's. [[User:Yomikoma|Yomikoma]] ([[User talk:Yomikoma|talk]]) 16:13, 4 November 2013 (UTC)
:::: The Michael Jackson password should just be "ABC". (The other clue refers only to letters, and the proper song title also has only letters.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:57, 4 November 2013 (UTC)
::: Given that name1 is two blocks long, I would guess that the apostle's name is going to be eight characters long, with the second hash block being 1+seven spaces (or nulls if Adobe pads it with nulls and not spaces). But then again, as the only disciple with a name eight letters long is Thaddeus maybe not {{unsigned ip|141.101.99.214}}

:::: "St.Peter" is 8 characters, and having a "special" character (the period) makes it a good choice for passwords that might require 1 non-alphanumeric character (and ban spaces). [[Special:Contributions/141.101.99.223|141.101.99.223]] 11:47, 4 November 2013 (UTC)

:::: I think it is obvious that Name1 refers to {The user's name} + 1. I wonder though if we should be referring to one of the other 12 apostles in a different context? https://en.wikipedia.org/wiki/Twelve_Apostles_%28disambiguation%29 - [[Special:Contributions/108.162.242.11|108.162.242.11]] 18:02, 4 November 2013 (UTC)
::::: Is the "weathervane sword" referring to Redwall? I haven't read the book myself, but would it be referring to the "Sword of Martin"? [http://redwall.wikia.com/wiki/Sword_of_Martin] --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:17, 4 November 2013 (UTC)

Another article about using passwords hints from multiple users to find the passwords from the breach. http://7habitsofhighlyeffectivehackers.blogspot.com/2013/11/can-someone-be-targeted-using-adobe.html [[User:Bugefun|Bugefun]] ([[User talk:Bugefun|talk]]) 11:06, 4 November 2013 (UTC)

"Sexy earlobes" makes me think of [http://misswiu.livejournal.com/5385.html "The ABC of Aerobics"], but that would make that Shirley Clarke, and nothing in Star Trek has anything to do with Shirley that I am aware of, except possible [http://en.memory-alpha.org/wiki/Ruth Shirley Bonne as Ruth]. I skimmed a list of episode titles, but nothing jumps out at me as particularly earlobish. [[Special:Contributions/108.162.219.187|108.162.219.187]] 11:20, 4 November 2013 (UTC)

:Sexy earlobes might have something to do with Ferengi, but they didn't appeared in TOS. 141.101.99.214's idea is better. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 11:42, 4 November 2013 (UTC)

:OK, we know that "sexy earlobes" and "best TOS Episode" are the same for the first eight character, but differ after that, while "best TOS" and "sugarland" are the same after the first 8 characters. So, my guesses are : Best TOS episode: "Charlie X"; "Sexy Earlobes": Someone with the first name of "Charlie"; "Sugarland": some city in Texas (perhaps "HoustonTX") [[User:JamesCurran|JamesCurran]] ([[User talk:JamesCurran|talk]]) 16:51, 4 November 2013 (UTC)

Note that you should not ever use cipher in {{w|Block_cipher_mode_of_operation#Electronic_codebook_.28ECB.29|ECB (electronic codebook)}} mode, i.e. encrypt each block separately and independently, but use chaining. --[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 12:15, 4 November 2013 (UTC)
: And for passwords you shouldn't be using a cipher at all, but rather a hash function. (Or a cipher in one of the approved hash constructions, if you must.) And really you shouldn't be using a standard hash function, but be following best practices for passwords instead: salting the hash, using a *slow* hash function, etc. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)

Hmm, i'm rather confused about the last few on the list though. Assumedly the password for "he did the mash, he did the" would be "monster mash", but that would leave "purloined" with a password of either "monsterm" or "monster ". which doesn't make much sense. [[Special:Contributions/108.162.240.18|108.162.240.18]] 13:47, 4 November 2013 (UTC)

(charlie sheen) a1f9b2b6299e7a2b eadec1e6ab797397 sexy earlobes - He did a 2 and a half men episode on sexy earlobes
:(charlie x) a1f9b2b6299e7a2b 617ab0277727ad85 best tos episode - Star Trek has so many good episodes...
::(houstontx) 39738b7adb0b8af7 617ab0277727ad85 sugarland - Sugarland is in Houston, TX

I don't know about anyone else, but the "hints" column incidentally reminded me of {{w|Darwinian poetry|Darwinian Poetry}}... Not intentionally, I'm sure. [[Special:Contributions/141.101.98.214|141.101.98.214]] 14:46, 4 November 2013 (UTC)

Somehow I've missed out on this issue until this comic alerted me to it, but: once a few passwords are correctly guessed, does that make it straightforward to recover the encryption key, and then be able to decrypt '''all''' of them? —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 14:50, 4 November 2013 (UTC)

: Answering my own question: not really straightforward, no. 3DES is still pretty strong, and what knowing a few passwords gives you is a known-plaintext attack, which helps a little, but is by no means a giveaway. —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 15:00, 4 November 2013 (UTC)

:: Note that if blackhat used this service, he would know at least one plaintext - his own password--[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 15:05, 4 November 2013 (UTC)

:No, for calculating the encryption key of Triple DES, there is no real benefit in knowing million passwords, you would still need to brute force it. You would need to know at least 232 different passwords to make it easier but you can't do that with the leaked file (there are about 30 times less of them and moreover many of them are not unique). [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 16:08, 4 November 2013 (UTC)

Okay, so the first column is the encrypted password, the second one is the hint chosen by user. What do rectangles mean? [[Special:Contributions/173.245.53.151|173.245.53.151]] 15:28, 4 November 2013 (UTC)
:That are the fields to fill the characters in just as you do in a crossword puzzle. There are small fields at the beginning that take one character each and one large field at the end that takes one to eight characters. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 15:32, 4 November 2013 (UTC)

Water 3 is an egg group: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) . Given the length of the key, it will probably be 9-16 characters. (Crawdaunt, tentacool, and tentacruel are most likely) [[Special:Contributions/199.27.128.139|199.27.128.139]] 15:43, 4 November 2013 (UTC)
:-- which means 9dca1d79d4dec6d5 is either L, EL, or T, but I can't find a way for that to match up with any variation of "monster mash." [[Special:Contributions/173.245.55.209|173.245.55.209]] 16:15, 4 November 2013 (UTC)
:: Same problem here... Monster mash must not be correct, but it is one of the easier ones, I can't give up on it. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:35, 4 November 2013 (UTC)
::: Maybe, he did the MASH is about the book, movie or TV Show M*A*S*H instead? --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:49, 4 November 2013 (UTC)
:: Monster Mash was written by Bobby Pickett, maybe it has something to do with him? [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:38, 4 November 2013 (UTC)
::: Maybe it's not "monster mash" but just "monster". This would allow the Water-3 Pokemon to be "Cloyster". [[Special:Contributions/108.162.237.5|108.162.237.5]] 19:17, 4 November 2013 (UTC)
:::: You are having trouble counting to eight. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)
::::: You are forgetting the space. Assuming space is stored as a null character, this might actually work.[[Special:Contributions/173.245.54.29|173.245.54.29]] 01:43, 5 November 2013 (UTC)
:::::: Nobody in their right mind would encode spaces as nulls. For us to suppose that they did, we'd need to have some specific clue to that effect. [[Special:Contributions/108.162.238.5|108.162.238.5]] 09:08, 5 November 2013 (UTC)

It seems to me there are two puzzles here, if folks are right that this is not actual data from the hack. 1) Figure out Adobe's master 3DES encryption password, for the big prize. 2) figure out Randall's 3DES encryption password for this puzzle based on these hints, and knowing it will be something clever. [[User:Nealmcb|Nealmcb]] ([[User talk:Nealmcb|talk]]) 16:12, 4 November 2013 (UTC)

Trying to decode the passwords (As Randall obviously wants us to)
"with your own hand you have done all this" is from the book of Judith.
Working on decoding the others. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:13, 4 November 2013 (UTC)

8babb6299e06eb6d = password
a0a2876eb1ea1fea = 1
85e9da81a8a78adc = 57
--[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 18:10, 4 November 2013 (UTC)

Weather Vane Sword may be a reference to Game of Thrones Ascent. The "Sworn Sword", I believe is "Rona" which is also a name. [[Special:Contributions/173.245.55.216|173.245.55.216]] 18:27, 4 November 2013 (UTC)
: It needs to be a name of an apostle (as per line 7) and have 7 or 8 characters (as line 3 needs a continuation) so this leaves Matthew, Thaddeus and (Judas) Iscariot. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:57, 4 November 2013 (UTC)

If a password(or 8 character segment) is guessed can it be confirmed? Somebody should take this leaked list and create a website that presents it like in the comment and lets people guess. It can fill in the guessed ones. [[Special:Contributions/108.162.246.117|108.162.246.117]] 19:17, 4 November 2013 (UTC)

I'm putting in Mattias for the sword, name1 and disciple because of Saint Matthias [http://en.wikipedia.org/wiki/Saint_Matthias] and Redwall Matthias [http://redwall.wikia.com/wiki/Matthias] who held the Weathervane Sword (Also known as the sword of Martin [http://redwall.wikia.com/wiki/The_Sword_of_Martin] ) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)
: I've also removed "monster mash" from the list as it can't be right. Doesn't match the pokemon or the purloined clues. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)

Based on the Water-3 Pokemon hint, the only possibilities of more than 8 characters are tentacool, tentacruel, barbaracle, crawdaunt, carracosta, clauncher, and clawitzer. This would mean "9dca1d79d4dec6d5" would be l, el, le, t, ta, or r. --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 19:51, 4 November 2013 (UTC)
: This is assuming there are no characters before the actual name of the pokemon. [[Special:Contributions/173.245.55.209|173.245.55.209]] 20:30, 4 November 2013 (UTC)
: Assuming Randall has constructed this comic to have a unique answer, it can't end in r because then the clue would be ambiguous (could be clauncher or clawitzer). [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Some of these can be ruled out; it's very unlikely to be a Generation VI Pokémon (Barbaracle, Clauncher and Clawitzer) as this has only just come out and someone would have had to set up their pasword within the last few weeks. And the Pokémon that are also in the Water-1 group are probably more likely to be thought of as Water-1 than Water-3 (Crawdaunt and Carracosta). This only leaves Tentacool and Tentacruel as longer than 8 letter Water-3 only Pokémon that have been known of for a reasonable length of time; and Tentacool is no one's favourite, as the annoying multitude of them that show up whenever you try to Surf anyway makes them as reviled as Zubats in caves, if not moreso. :P Of course, the password need not be simply the Pokémon's name alone. "SexyShellder" "Cloyster1987" "Misty'sStarmie"... Who knows? [[Special:Contributions/141.101.99.252|141.101.99.252]] 01:03, 5 November 2013 (UTC)

I don't know the answer to the end either, but here's a list of people who did the Monster Mash, from Wikipedia:
* Bobby Picket (as Boris Picket)
* Garpax Records (Gary S. Paxton)
* The Misfits
* far, far too many other covers to list
And here's some synonyms for "purloined", from thesaurus.com:
* stole
* pilfered
* filched
* misappropriated
* embezzled
* burglarized
* shoplifted
* poached
* pillaged
* cheated
* pinched
* heisted
* thieved
* plundered
* appropriated
* lifted
* took
* snitched
* defrauded
* swindled
* ripped off
* made off with
Good luck with these!
—[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:31, 4 November 2013 (UTC)

What about Purloined referring to "The Purloined Letter?" When choosing hints, people, at least in my experience, tend to use word association rather than synonyms. [[Special:Contributions/173.245.55.209|173.245.55.209]]

Purloined could also be a reference to the Monster.com hack (http://www.symantec.com/connect/blogs/monster-trojan). [[Special:Contributions/108.162.237.11|108.162.237.11]] 21:00, 4 November 2013 (UTC)

Words meaning purloined that can have the listed suffixes could be '''embezzle'''/'''embezzler''' or '''scrounge'''/'''scrounger'''. Not sure if it fits to the mash clue. There was a loan shark character who would acquire things on MASH called Rizzo, it is a stretch though. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:01, 4 November 2013 (UTC)

I'm still trying to figure out how the solutions go into the spaces on the right -- it may be more obvious once the last couple clues are figured out. I suspect the ordering and numbers of clues have some sort of meaning. Why are there 5 of the 877... passwords, 2 with no clues? Why is one of the 4e18.... passwords separated from the rest? [[Special:Contributions/108.162.221.28|108.162.221.28]] 21:07, 4 November 2013 (UTC)

Could Purloined be a reference to the "Purloined Shadows" book in Elder Scrolls? --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 21:09, 4 November 2013 (UTC)
: Or 'The Purloined Payroll', a WoW quest? "Purloined in Petrograd" is also a lyric to a Decemberists song (The Bagman's Gambit). Google n-grams suggests that "Purloined Image", and "purloined documents" are a Thing. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:58, 4 November 2013 (UTC)

Purloined could be a reference to something that is known as have been stolen like a work of art, or it could be something that was stolen in an XKCD comic. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:18, 4 November 2013 (UTC)

'''EdgarPoe'''(author of The Purloined Letter)/'''EdgarPoet''' fits, but again not really anything to do with MASH. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:27, 4 November 2013 (UTC)

Water-3 pokemon (egg group) are given here: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) ...if I split off the letters of their names after the 8th letter, we see l, el, le, t, ta, and r. So the MASH item ends with one of those suffixes. [[Special:Contributions/199.27.128.167|199.27.128.167]] 21:31, 4 November 2013 (UTC)
: Can't end in 'r', because then that clue would be ambiguous. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Speaking of pokemon, could the clue to purloined have something to do with the pokemon Purrloin? http://bulbapedia.bulbagarden.net/wiki/Purrloin_(Pok%C3%A9mon) [[Special:Contributions/108.162.221.43|108.162.221.43]] 23:51, 4 November 2013 (UTC)

Is there a reason "MASH" is capitalized in the above sections? Given the context, it shouldn't be, and I still haven't given up on the password being a reference to the monster mash. That said, we can't ignore the movie/show MASH.
Also, now that I think about it: pokeMONstermash? I don't know, just throwing ideas out :P [[Special:Contributions/173.245.55.209|173.245.55.209]] 22:08, 4 November 2013 (UTC)

On [http://de.reddit.com/r/programming/comments/1pvwyf/xkcd_encryptic_analysis_at_the_link_below/ reddit] they suggest "Letterman" (which is wrong, too many letters) based on the M*A*S*H episode, "Letters". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:11, 4 November 2013 (UTC)
:...on the other hand, I wonder if an answer like "ALANALDA" would work? As in, someone who "did the M*A*S*H"... [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:13, 4 November 2013 (UTC)
:: Sadly, no. Because it needs to be more than 8 characters. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 22:17, 4 November 2013 (UTC)
::: No, I mean, "an answer of this form", not ALANALDA exactly. The Edgar Allan / Alan Alda congruence is tasty, but I can't make it work. ALLANPOE works as an answer for "Purloined" but that makes something like ALLANPOET the answer to "he did the MASH" (CRAWDAUNT is then the pokemon). But that's misspelling Alda's name for the MASH clue, doesn't quite work. There's also JAMIEFARR (Cpl Klinger) as a better answer to "he did the MASH" but then that makes JAMIEFAR the answer to "purloined" and I can't plausibly make that work. ALLANARBUS is another M*A*S*H actor, but that doesn't work at all. Can anyone come up with other/better ideas in this vein? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:31, 4 November 2013 (UTC)
::: Don't misspell Alda's name; misspell Poe's! —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 02:07, 5 November 2013 (UTC)

In crossword puzzles, a clue ending in -ed (like 'purloined') is most commonly a hint that the answer ends in 'ed'. Cross referencing that with the Pokemon clue, the solution for "he did the MASH" becomes a nine or ten letter answer ending in: -edl, -edel, -edle, -edt, or -edta (excluding -edr due to non-uniqueness), with ......edle looking the most "English-y" to me. My hunch would be something else Robert Altman or Alan Alda "did"... but nothing seems to end in 'edle.' --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 23:07, 4 November 2013 (UTC)
: There is no indication that this is a standard crossword. Most users don't respect crossword conventions when writing password hints. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
:: Aside from the title. And the text. And the fact these didn't come from users, but were just chosen for a puzzle designed by Randall, who would include just this sort of puzzler hint/in-joke in a comic about puzzles. It's moot, because no synonyms for 'stolen' make any sense with a couple other letters tacked on the end. But still, there've been worse hunches. --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 00:45, 5 November 2013 (UTC)

For all we know, his favourite Water-3 Pokémon could be Shell Smash Cloyster or Shell Smash Omastar - "OmastarSmash" as a password would fit in with "Monster mash". [[Special:Contributions/141.101.99.252|141.101.99.252]] 23:16, 4 November 2013 (UTC)
: I like that idea, although it leaves "Monster " (with a trailing space) as the answer to "Purloined", which makes no sense. But interesting idea. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 00:00, 5 November 2013 (UTC)

MonsterMash
MonsterM
TheWiscash {{unsigned|Jcupcake}}
: It's "Whiscash", and it's Water 2 (not 3) and "MonsterM" makes no sense as an answer for the hint "Purloined". But I like the idea of adding "The" in front of the pokemon answer; perhaps we're being too restrictive by looking only at pokemon with length > 8. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
::Yeah, sorry about the typo - last one would be TheWhiscash. MonsterM absolutely makes sense. http://www.hoax-slayer.com/monster-666.shtml The purloined letter here IS M [[User:Jcupcake|Jcupcake]] ([[User talk:Jcupcake|talk]]) 02:40, 5 November 2013 (UTC)

So somewhere above this someone pointed out that purloined could refer to a monster.com hack...in which case, could the first two passwords be "monster mash" and "monster"? That would allow for another previous suggestion of "OmastarSmash" Also, here's my IP Address and a remarkably not-random timestamp: [[Special:Contributions/108.162.219.195|108.162.219.195]] 01:31, 5 November 2013 (UTC)

It could also be that there are modifiers to the base. I always thought of Monster Mash as MonstaMash. This would line up closely with My Corphish written as "mycorphish" My favorite pokemon is my pikachu not just any pikachu, but mine, sort of logic. [[User:Bitassassin|Bitassassin]] ([[User talk:Bitassassin|talk]]) 01:43, 5 November 2013 (UTC)

Could "he did the mash" be referring to brewing and/or the Maillard reaction? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 05:32, 5 November 2013 (UTC)

I was just thinking that "MonsterM Ash", "MonsterM", both seem to make sense, and Ash had a few water pokemon in the water 3 egg group, so could it potentially be something along the lines of "Corphish Ash"? That was the only 8 letter water 3 pokemon he had and it fits with the other clues [[User:NewToThis|NewToThis]] ([[User talk:NewToThis|talk]]) 07:25, 5 November 2013 (UTC)

Has the idea of pokemon fusion been considered? http://pokemon.alexonsager.net/ referenced by http://kotaku.com/how-the-website-that-lets-you-create-frankenstein-pokem-510517336
--[[User:Oukansz|Oukansz]] ([[User talk:Oukansz|talk]]) 19:25, 5 November 2013 (UTC)

;Fanservice

Randall must know about this site. This comic doesn't work without people to crack the code. Should we have a fanservice category? :-) --[[User:SurturZ|SurturZ]] ([[User talk:SurturZ|talk]]) 23:32, 4 November 2013 (UTC)

I'm beginning to suspect that the wide boxes will have the key in it. Assuming he used regular DES (or DES3, for that matter, but using the same 8-byte key 3 times), it could be plausible. The 5 in the middle could be 'abcde', a lot of the other 'second halves' are numbers, and the likely known one that's not seems to be an 'x' -- which could certainly be involved in writing a hex number... problem is there's 11 of those boxes. Trying to guess what signficance the positioning of those boxes have. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:00, 5 November 2013 (UTC)

Actually, it looks like the boxes line up perfectly such that the wide bits (for second-half) will only touch the words they apply to. Order will be more or less what they are (I see the wide boxes as, in order, 1, 57, 10, Sheen, and X, with the 8 char boxes as Matthias, Password, Judith15, Charlie, and HoustonT). The next 5 are odd -- I'm not sure if we repeat the alpha/obvious password 5 times, or it's 5 chars long (abcde) and one per box. The last set is still under discussion, of course. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:20, 5 November 2013 (UTC)

;MASH capitalized
I'm currently chasing down the idea that MASH refers to [[Wikipedia:MASH-1]]. Haven't seen any name yet that looks like it might satisfy "Purloined". - [[User:BozoTheScary|BozoTheScary]] ([[User talk:BozoTheScary|talk]]) 01:56, 5 November 2013 (UTC)

I think MASH is a transcribing error. The comic doesn't have any difference on those letters as far as I can tell. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:18, 5 November 2013 (UTC)

The Purloined Letter is a Edgar Alan Poe story starring C. Auguste Dupin. Might help. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:08, 5 November 2013 (UTC)

There is also a strong association between the Monster Mash and the Mashed Potato, just throwing another idea into the ring. Also try the name BobbyPickett. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:22, 5 November 2013 (UTC)

Frankenstein did the Monster Mash in the cartoon for the song. That leads to a Pokemon card ending in 'tein' and 'frankens' for the hint Purloined. I could not find a Pokemon card that ended in 'tein' nor could I link 'frankens' with Purloined. I ran 'frankens' through Google Translate but found nothing. Also, it's the same password for the "monster mash" hint and the entry with no password hint so I think it's an obvious password (something someone can recall without a hint). Frankenstein fits that part but not the other ones. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:35, 5 November 2013 (UTC)

My $0.02: "He did the mash..." might allude to the expression "doing the math" only (intentionally) misspelled and something like "numbert" or "numb" could be the answer. --[[User:RagnarDa|RagnarDa]] ([[User talk:RagnarDa|talk]]) 04:01, 5 November 2013 (UTC)

graveyard smash fits for the first clue (though lyrically incorrect). Gives smash as second block, but cannot find association between graveyard and purloined. [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:08, 5 November 2013 (UTC)

If we take The Monster Mash for the first answer, it could be written as TheMonsterMash or The Monster Mash, giving either TheMonst erMash or The Mons ter Mash as the two blocks. This gives either Themonst or The Mons as Purloined and either ermash or ter Mash for second block of pokemon answer. Suggestions? [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:15, 5 November 2013 (UTC)
: Only problem is that the word "the" is the last word of the hint.[[Special:Contributions/108.162.237.117|108.162.237.117]] 04:51, 5 November 2013 (UTC)

I know that the water-3 group is not the same, but it seems like an odd coincidence that another pokemon group is the "monster" group. --[[User:Natnee|Natnee]] ([[User talk:Natnee|talk]]) 04:44, 5 November 2013 (UTC)

There is a Scooby Doo comic book story titled "[The Purloined Poe-M](http://scoobydoo.wikia.com/wiki/The_Purloined_Poe-M)", which has an odd similarity to the "MonsterM" possible password. This would leave the pokemon password ending "ash" who, of course, is a pokemon character ... which makes no sense in that place. [[Special:Contributions/199.27.128.83|199.27.128.83]] 05:51, 5 November 2013 (UTC)

Here's one that fits: 
facemash4077 (Combination of facemash by zuckerberg and M*A*S*H) 
facemash (Site made by Zuck in The Social network.) 

Maybe facmashklinger.. The eggklinger being a water-3 Pokemon? [[Special:Contributions/108.162.215.39|108.162.215.39]] 06:14, 5 November 2013 (UTC)rbnm

[http://en.wikipedia.org/wiki/John_Orchard John Orchard] played in M*A*S*H and also was in the movie "The Letter" [[Special:Contributions/108.162.250.8|108.162.250.8]] 05:02, 6 November 2013 (UTC)

;Working Backwards
I'm attempting to take a different tact, by trying to find the key itself. I'm assuming its something easy to guess. I've tried the top 100 Adobe passwords (you can get them [http://stricture-group.com/files/adobe-top100.txt here]) using the following bash script (testing the word "matthias", as this one seems pretty certain):

<code>
while read p; do echo -n $p\: && echo -n "matthias" | openssl enc -e -des-ede3 -nosalt -nopad -pass pass:$p | xxd -p; done < passwords.txt
</code>

For this to work, I pre-processed the top 100 passwords file with:

<code>
cat adobe-top100.txt | cut -c51- > passwords.txt
</code>

…and then trimmed the cruft with a text editor (leading text paragraph and table headers). So far no luck; perhaps someone with more time on their hands can try some obvious XKCD-related passwords (I've tried XKCD, xkcd, xkcd.com, randall, rmunroe, encryptic, and Encrytic) and see if the encrypted version(s) match up with what we have here. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:27, 5 November 2013 (UTC)
:I should mention that I've also tried OpenSSL's des-ede mode and des-ecb, as Im not sure if Randall used one, two, or three key mode. I'm also assuming the key has been generated from the password using OpenSSL's default key generation method, any of with I suppose could be incorrect. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:39, 5 November 2013 (UTC)
:: Nice work. Note that the puzzle is very specific about using "block mode 3-DES" (usually called "ECB"). DES keys are actually 56 bits; each of the 8 bytes has odd parity (the number of 1 bits is odd). From [https://en.wikipedia.org/wiki/Data_Encryption_Standard wp], "Bits 8, 16,..., 64 are for use in ensuring that each byte is of odd parity." As a wild guess, I'd suggest that, if Randall chose a readable 8-ASCII-character passphrase, he also selected only characters that would make the parity bit zero (so that the result was ASCII). That is, <code><nowiki>[ #%&)*,/12478;=>@CEFIJLOQRTWX[]^abdghkmnpsuvyz|]</nowiki></code>. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:34, 5 November 2013 (UTC)
::: Uh, hold one. Read the "Explanation" section above. It's clear that the hashes are not real, so brute-forcing the key isn't going to work. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:48, 5 November 2013 (UTC)
:::: Just to note, there are actually three options for keys in TripleDES: having three independent keys (K1, K2, K3), having two independent keys (K1, K2, K1), or using a single key (K1, K1, K1). When run in ECB mode, OpenSSL calls these '''des-ede3''' and '''des-ede''' for options 1 and 2 (option 3 is for backwards compatibility with DES, and can be run using just '''des-ecb'''). See [http://en.wikipedia.org/wiki/Triple_DES#Keying_options Triple DES - Keying Options] for details. In addition, the password and the key are two different entities -- typically the password is run through a keying algorithm first (commonly [http://en.wikipedia.org/wiki/PBKDF2 PBKDF2] for 3DES), so there is no need to select password characters based on parity patterns. All of which is moot now that we know that the data isn't in fact TripleDES encrypted in the first place. I'm actually disappointed in Randall now :P. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 19:01, 5 November 2013 (UTC)

I Hadn't seen it mentioned yet, but Monster Mash was written by Robert George Pickett (http://en.wikipedia.org/wiki/Bobby_Pickett), Whose last name goes closely with the second clue, Purloined, which means "stolen". I can't make it work, but I figured it was worth pointing out. (Nov 5th 1:26 pm utc ) [[Special:Contributions/173.245.56.24|173.245.56.24]] 13:27, 5 November 2013 (UTC)
: It's a good connection. Maybe we should reorganize the discussion and start a list of "interesting ideas we can't quite make work" in the hopes that someone else has an insight. Edgar Allan / Alan Alda, Pickett / "Pick it", Klinger / Kingler, etc. Most of these are just manifestation of the human brain's ability to find patterns even in random coincidence, of course, but one of them might be on the right track. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

Just quick thoughts.
I feel like Cpl klinger and the water type kingler is too solid a connection to ignore even though I can't really use it.
Kingler was owned in the series by Ash.
Ash is a three letter word and the last three letters of the phrase monstermash.
Monsterm=8 letters so the first block ash=3 letters in the second block.
Monsterm is about the monster.com thing, therefore purloined. It's a double reference, the .co has been purloined from the purloined website.
Then blastoise -3, or rather blastois3 - 3 (mocking the common password meme of replacing letters with numbers)
So the last password, which is super hard to guess and well chosen even with the clue is, blastoisash? It's a feasibly memorable password that would not be quickly forgotten by a pokemon fan while still being hard to guess.
Can you think of a way to check it? Maybe go into the old command line xkcd and try it as a password? (From a contributor to my talk page) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 13:52, 5 November 2013 (UTC)
: That's really a stretch. ".co is purloined from monster.com?" really? The answer will be far more obviously correct... once we figure it out. Look at the other answers, for example. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

;another quick idea for monster mash

It could be deflection. Maybe whoever put it in was paranoid. Or just dumb. Or who knows.

But, there is a pokemon that's in the monster/water(-1) hybrid group called Marshtomp.

Monster mash, mashed (ie anagrammed) can give us all but the P out of that... which is fine, as it's a 9-letter name.

Thus we have E, N and S left over (and indeed a further T, H, E), which could become overall, e.g, Marshtomens (...Marshtomethens? Or w/e), which you can split up as you like to represent something which has been stolen (personally). Possibly in german slang or something. It doesn't have to be a direct thesaurus link, it could well be complete misdirection (on Randall's behalf, or that of his notional Adobe user), same as for the pokemon.

And for the pokemon itself, it could well be "Marshtomp3" ;)

Also, don't forget about reversed words and so-on.

Heck, I've used very personal and/or random things (like, maybe two or three people in the world may recognise it in connection with me, and it's not online, at least not anywhere it can be found - basically it's just in my head and dies with me), reversed, with numbers substituting random characters, as passwords before. That covers each individual base in just one PW...

Now we just have to start feeding the guesses into a hash engine and try to figure out, maybe brute force, what the original key was. Knowing almost all of the other answers already makes this far, far easier for those who may have the facility to run the tests already. [[Special:Contributions/141.101.99.213|141.101.99.213]] 14:54, 5 November 2013 (UTC)
: This is not a real excerpt from the password file, this is a puzzle which Randall made up. Therefore, the answer to the last group will not be random, and it will not be a stretch. It will be obvious (as obvious as the previous ones)... once we figure out the catch. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

FWIW, Eve Online also features a "Purloined Sansha Codebreaker". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:16, 5 November 2013 (UTC)

I agree that the solution has to be obvious - especially after its revealed. If this were a crossword puzzle, then the clues like Purloined might be followed by a question mark. Purloined? a cat that is loined - a cat that is covered with cloths? Puss in boots? Or something along those lines... [[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

purloined=phished (Corphish)? {{unsigned ip|108.162.216.227}}

i wonder if the link between the last three clues is more like a cryptic crossword puzzle---for instance, --purloined= heisted; the other clues reading it as he/is/ted...?--[[User:Wwd|Wwd]] ([[User talk:Wwd|talk]]) 22:40, 5 November 2013 (UTC)

I wonder if the pokemon could be the name of an ubuntu release, per "Not Really Into Pokemon" at http://xkcd.com/178/ --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 22:45, 5 November 2013 (UTC)

You could also abbreviate Robert Pickett's name (the co-writer of Monster Mash) as "Rob Pickett" which goes even more with purloined (the first 8 letters are now "Rob Pick"). [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:21, 6 November 2013 (UTC)

Beings that "did the mash" according to the song http://www.lyricsondemand.com/onehitwonders/monstermashlyrics.html : my monster, the ghouls, Igor, Igor's baying hounds, the coffin-bangers, "The Crypt-Kicker Five", you. Zombies, Wolf Man, Dracula/Drac, and Boris were also mentioned, but they didn't do the mash. Hope that helps someone (doesn't help me). [[User:DPWally|DPWally]] ([[User talk:DPWally|talk]]) 23:05, 6 November 2013 (UTC)

;Capitalization hints?

I have no idea who first put the capital letters in "MASH" and "Purloined" in the transcript (and I don't want to check), but now that I've gotten rid of the second (after somebody else got rid of the first), I want to record them here for the record. Possibly Randall put them in and was feeding us clues (so ''MASH'' the book or movie, and ''Purloined'' a title such as Poe's). I consider this unlikely (after all, I removed one of these capitalizations), but the possibility should be recorded. —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 01:17, 6 November 2013 (UTC)

I can't be a coincidence that this comes up as the top google news search for 'purloined:' http://www.theregister.co.uk/2013/11/05/adobe_users_purloined_passwords_were_pathetic/ {{unsigned ip|108.162.246.120}}

"38a7c9279cadeb44 9dca1d79d4dec6d5 he did the mash, he did the": Ministermash (sounds like monster mash)
"38a7c9279cadeb44 purloined": Minister (based on the character Minister D-, who stole the letter in the Edgar Allen Poe story)
"a8ae5754a2b7af7a 9dca1d79d4dec6d5 fav water-3 pokemon": OmastarSmash (Shell Smash Omastar)
So,38a7c9279cadeb44 = minister, 9dca1d79d4dec6d5 = mash, a8ae5754a2b7af7a = omastars
04:07, 6 November 2013 (UTC)
:Probably one of the best complete theories I've heard [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:26, 6 November 2013 (UTC)

I suggest "alligato" (a form of Latin ''alligatus'', perfect passive participle of ''alligo'' "bind up"), and "alligator" (Referencing "Land of 1000 Dances"). [[Special:Contributions/199.27.128.62|199.27.128.62]] 05:37, 6 November 2013 (UTC)

I think there is a transcribe mistake. 
Instead of "fav water-3 pokemon" 
Could it be "fay water-3 pokemon" 
Look at the Y and V letters in the non-chopped letters above. I think it is a Y and not a V. 
{{unsigned ip|108.162.215.51}}
*About the Pokemon, is it possible everyone's ignoring a much simpler explanation? Every Pokemon game begins with a choice of one of the three starter Pokemon, each of which have an evolutionary line of three Pokemon. In first gen, if your "favorite [is] water [from the] 3 Pokemon", then you'll be using Squirtle, followed by Wartortle and Blastoise. 2nd gen: Totodile, Croconaw, Feraligatr. 3rd gen: Mudkip, Marshtomp, Swampert. 4th gen: Piplup, Prinplup, Empoleon. Perhaps the answer uses one of these, or some combination of them? --Anon 08:57, 6 November 2013 (UTC)

Boris Blacher wrote an opera based on 'The purloined letter' This may fit with Bobby 'Boris' Pickett who sang Monster Mash [[User:YellowYeti|YellowYeti]] ([[User talk:YellowYeti|talk]]) 11:11, 6 November 2013 (UTC)

The "Boris" in "Boris Pickett" is a reference to Boris Karloff. (In his other work, Pickett doesn't use that name.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 12:36, 6 November 2013 (UTC)

An alternative tack: how about Barbaracle for the Pokemon, BarbaraC(Jordan) for purloined and Barbara Clark - famous for doing Monster Mash-up novels. Does Barbara Jordan have some purloined link with watergate? {{unsigned ip|108.162.231.16}}
No, because the pokemon has a different starting string as the other two. --[[Special:Contributions/199.27.128.119|199.27.128.119]] 13:48, 6 November 2013 (UTC)

I think it is not coincidence that it is the last one that you can't solve. It may be an experiment by Randall to see if people can find a solution for a puzzle that doesn't make any sense. That said, if it does have a solution, it should not be "monstermash" since that is too close to the clue. If that was the password, everyone could guess it easily from the clue. It has to be one level "removed" from those words, guided by the clues for the matching passwords. The point of the post was that using unsalted crypt in the passwords allows you to combine clues, right? [[Special:Contributions/108.162.219.201|108.162.219.201]] 13:42, 6 November 2013 (UTC)

Not an answer, but maybe an approach: Look at it from the "what piece of information is Randall trying to tell us?" angle. In the first few puzzles, he teaches us the rules of the game. We disambiguate clues by later ones, which we can only do because of the missing salts. For example, the "name and jersey number" just tells us the format of the answer to the previous clue about Judith 15:10. Otherwise, there would have been no way to guess that exact string without the space and colon. Also, "Charlie X" and "Charlie Sheen" demonstrate that spaces are used in a "fair" way. I would not expect a trailing space on a password, for example. So what about the Pokemon then? The first half of the crypt for the Pokemon isn't used anywhere else. The easiest interpretation I can come up with is that this is just trying to restrict the common second part of the word to letters from the list of Water-3 Pokemon. Let's assume it wasn't made very difficult, so take just 'el', 'le', and 'l' from the Water-3-only group on bulbapedia. Then the puzzle is this:

something related to 'monster mash': 8 letters plus the ending 'el', 'le', or 'l'
something related to 'purloined' or related to 'letter': the same 8 letters, minus the ending
pokemon: completely unrelated, just chosen to have a well known list of 9 or 10 letter words to restrict search space for first line

I suck at crosswords, but can someone solve this restated version? There can't be that many 8 letter words that also make a word with 'el', 'le', or 'l' added to them? 15:23, 6 November 2013 (UTC) {{unsigned ip|108.162.219.201}}

: Not to insult your reasoning, which is entirely correct, but I believe your restatement is *exactly* the puzzle that (reasonable) people have been working on (and failing to solve) since Monday. As a long-time mystery hunter, I'd like to suggest the opposite: the continued failure to find some reasonable solution to the puzzle as stated above implies that *at least one* of the assumptions above is wrong. (For the record, I'd broaden your first to "...related to 'monster mash' or the show/film M*A*S*H", but again, that's the assumption we *have* been making.) So I'm especially interested in ideas *different* from the above, at this point, although not necessarily throwing out the bathtub, baby and all. Probably there's a fundamentally different way to read the first clue, or the second, or the third. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: Not insulted at all, just glad if I summarized it correctly, since I was late to the party. Maybe this helps others bootstrap. As requested, a slightly alternate view for clue 1: the word "mash" may not be part of the answer, since it appears in the clue. This means the direct answer to the clue is "monster" and has nothing to do with the song at all. The password could just be the name of a monster that is formed from something purloined plus an short ending. The endings we're already considering make nice monster names.[[Special:Contributions/108.162.219.198|108.162.219.198]] 19:54, 6 November 2013 (UTC)

:::I appreciate the summary, it helped me come up with my "keyboard mash" proposed solution, which you can see below" [[Special:Contributions/108.162.221.16|108.162.221.16]] 21:51, 6 November 2013 (UTC)

Looking at some word lists at http://www.litscape.com/words/ending_with/l/9_letter_l_end_words.html , this doesn't seem to be leading anywhere good. Can someone fix my logic? [[Special:Contributions/108.162.219.201|108.162.219.201]] 15:33, 6 November 2013 (UTC)

Not sure if anyone else has pointed out yet, but there is a pokemon named purrloin http://bulbapedia.bulbagarden.net/wiki/Purrloin_%28Pok%C3%A9mon%29 . That seems like far too much of a coincidence to not be related. [[Special:Contributions/173.245.52.211|173.245.52.211]] 16:17, 6 November 2013 (UTC)
: We'll add it to the long list of suspicious coincidences. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: I don't believe the hints can be related. Note that the Pokemon's name shares zero characters with the answer to the 'purloined' clue, so they are not linked via the same password. Any semantic link is inconsistent with these being password hints from separate (imaginary) users. Maybe Randall subconsciously (or via google) went from purloined to Purrloin to names of Pokemon. [[Special:Contributions/108.162.219.198|108.162.219.198]] 19:20, 6 November 2013 (UTC)

a stretch.. but maybe a starting point?
bootlegd purloined
bootlegd ash he did the..
???whisc ash fav-3
[[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

;Hash collision

Maybe the last clues could be intended to be a hash collision? With 64-bit blocks that seems unlikely, but maybe it's a trick?
[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:29, 6 November 2013 (UTC)
:Finding the probability of a collision amounts to the birthday problem. Assuming the hash function gives all 2^64 hash values with equal probability and there are 153 million unique message blocks (probably right within an order of magnitude), we have:
:
: <pre>Pr[collision] = 1 - exp(-153000000^2/(2*2^64)) = 0.000634</pre>
:
: So the probability of a hash collision from different passwords is still quite low, even with such a large number of passwords. So it's worth assuming that all the identical hash blocks are from the same message, and keep looking for the poke-mash password.
: BTW, getting a 50% chance of a collision requires about <tt>sqrt(-2^65*ln(.5))</tt> = 5 billion unique passwords.
:[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:46, 6 November 2013 (UTC)

'''Explanation for the last 3:'''

He did the mash, he did the "keyboard mash"
ASDFGHJK - L

purloined "one letter from the home row"
ASDFGHJK

Then the third one is TENTACOO - L
[[Special:Contributions/108.162.221.16|108.162.221.16]] 21:45, 6 November 2013 (UTC)
:Purloined seems like a stretch. On the other hand, 'asdfghjkl' is the 56th most common password in the real adobe data, so perhaps you're on to something. [[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 22:08, 6 November 2013 (UTC)
::I don't know, I feel like purloined has got to be a reference to the Poe story. The pun that letter means single character rather than item of correspondence is cute and funny. [[Special:Contributions/108.162.221.16|108.162.221.16]] 22:30, 6 November 2013 (UTC)
:I like this explanation --[[User:Lackadaisical|Lackadaisical]] ([[User talk:Lackadaisical|talk]]) 22:28, 6 November 2013 (UTC)

Why the restriction on the ending of the Pokemon to el, l, etc? There could be an adjective before (i.e. redkingle), so the Pokemon name could extend more into the second frame. The adjective might be some abreviated synonym for favorite, or whatever fav (or fay) stand for. [[Special:Contributions/108.162.215.34|108.162.215.34]] 22:07, 6 November 2013 (UTC)rbnm

;The last clue

Regarding it being actually Fay water-3 pokemon, have a look at this: http://www.serebii.net/e-reader/battle/08.shtml

The trainer is named Fay, and has a Starmie, which is a Water-3 Pokemon according to http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group)

However, its only 7 characters. Not sure if it means anything, but just putting it out there.

EDIT: FayStarmie takes us to 10, leaving 9dca1d79d4dec6d5 meaning 'ie'

EDIT 2: I believe there is a Fay in Pokemon X and Y, but I can't find any information on her. Also Fay could refer to fairy, which is the new type added in Pokemon X and Y, but there doesn't seem to be any fairy Water-3 Pokemon, or any pokemon that reside in both groups. [[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 00:24, 7 November 2013 (UTC)

Talk:1286: Encryptic

2013-11-07T00:24:13Z

Haelbarde:

The answer to the weathervane sword/ favorite apostle hint has got to be Matthias. It is 8 characters long, Matthias was the apostle chosen to replace Judas and in the Redwall series Matthias is one of the wielders of the Sword of Martin a sword that was hung on a weathervane.

It is unclear to me if these are actual hashes from Adobe file? That would be very cool... but actual file seems to have passwords in slightly different format. http://arstechnica.com/security/2013/11/how-an-epic-blunder-by-adobe-could-strengthen-hand-of-password-crackers/ [[Special:Contributions/108.162.229.211|108.162.229.211]] 09:05, 4 November 2013 (UTC) pavel

:I wouldn't call 3DES secure ... but yes, in this situation the real problem is not using per-user salt. Note that I would expect that at least some of those examples would be solvable ...any idea? Hmmm ... sword of weather vane and one of apostles might be Martin ([http://redwall.wikia.com/wiki/Sword_of_Martin]) ... -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:00, 4 November 2013 (UTC)

::It's Jonathon (for John). Not sure what it has to do with weather vane swords though... [[Special:Contributions/108.162.240.18|108.162.240.18]] 12:42, 4 November 2013 (UTC)

:Umm. "Peter" does not seem to have 8 characters, does it? Encryption method suggests it should be 8 characters, as do 8 character boxes on the right... [[Special:Contributions/108.162.229.211|108.162.229.211]] 10:43, 4 November 2013 (UTC) pavel

::I'd say "weather vane sword", "name1" and "favorite of 12 apostles" is (Saint) Peter. "Weather vane" as symbol for the rooster in the denial, and the sword Peter used when Jesus was arrested. --[[Special:Contributions/108.162.254.177|108.162.254.177]] 10:25, 4 November 2013 (UTC)

::: ... interesting that google search didn't mentioned it :-) Seems bible have too low pagerank. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:32, 4 November 2013 (UTC)

::: The 'favourite' apostle was John the Evangelist though. http://en.wikipedia.org/wiki/Disciple_whom_Jesus_loved . The other biblical clue here is 'with your own hand you have done all this' - Judith 15:10. If that's Judith1510 then the 'name and shirt number' is 'Judith15'. The TOS/earlobes clue seems to be "Spock's brain" and "Spock's (ears?)". And the Michael Jackson one is (obviously) ABC123. [[Special:Contributions/141.101.99.214|141.101.99.214]] 11:14, 4 November 2013 (UTC)
:::: Perhaps "favorite" in this case refer's to the user's favorite, not Jesus's. [[User:Yomikoma|Yomikoma]] ([[User talk:Yomikoma|talk]]) 16:13, 4 November 2013 (UTC)
:::: The Michael Jackson password should just be "ABC". (The other clue refers only to letters, and the proper song title also has only letters.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:57, 4 November 2013 (UTC)
::: Given that name1 is two blocks long, I would guess that the apostle's name is going to be eight characters long, with the second hash block being 1+seven spaces (or nulls if Adobe pads it with nulls and not spaces). But then again, as the only disciple with a name eight letters long is Thaddeus maybe not {{unsigned ip|141.101.99.214}}

:::: "St.Peter" is 8 characters, and having a "special" character (the period) makes it a good choice for passwords that might require 1 non-alphanumeric character (and ban spaces). [[Special:Contributions/141.101.99.223|141.101.99.223]] 11:47, 4 November 2013 (UTC)

:::: I think it is obvious that Name1 refers to {The user's name} + 1. I wonder though if we should be referring to one of the other 12 apostles in a different context? https://en.wikipedia.org/wiki/Twelve_Apostles_%28disambiguation%29 - [[Special:Contributions/108.162.242.11|108.162.242.11]] 18:02, 4 November 2013 (UTC)
::::: Is the "weathervane sword" referring to Redwall? I haven't read the book myself, but would it be referring to the "Sword of Martin"? [http://redwall.wikia.com/wiki/Sword_of_Martin] --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:17, 4 November 2013 (UTC)

Another article about using passwords hints from multiple users to find the passwords from the breach. http://7habitsofhighlyeffectivehackers.blogspot.com/2013/11/can-someone-be-targeted-using-adobe.html [[User:Bugefun|Bugefun]] ([[User talk:Bugefun|talk]]) 11:06, 4 November 2013 (UTC)

"Sexy earlobes" makes me think of [http://misswiu.livejournal.com/5385.html "The ABC of Aerobics"], but that would make that Shirley Clarke, and nothing in Star Trek has anything to do with Shirley that I am aware of, except possible [http://en.memory-alpha.org/wiki/Ruth Shirley Bonne as Ruth]. I skimmed a list of episode titles, but nothing jumps out at me as particularly earlobish. [[Special:Contributions/108.162.219.187|108.162.219.187]] 11:20, 4 November 2013 (UTC)

:Sexy earlobes might have something to do with Ferengi, but they didn't appeared in TOS. 141.101.99.214's idea is better. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 11:42, 4 November 2013 (UTC)

:OK, we know that "sexy earlobes" and "best TOS Episode" are the same for the first eight character, but differ after that, while "best TOS" and "sugarland" are the same after the first 8 characters. So, my guesses are : Best TOS episode: "Charlie X"; "Sexy Earlobes": Someone with the first name of "Charlie"; "Sugarland": some city in Texas (perhaps "HoustonTX") [[User:JamesCurran|JamesCurran]] ([[User talk:JamesCurran|talk]]) 16:51, 4 November 2013 (UTC)

Note that you should not ever use cipher in {{w|Block_cipher_mode_of_operation#Electronic_codebook_.28ECB.29|ECB (electronic codebook)}} mode, i.e. encrypt each block separately and independently, but use chaining. --[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 12:15, 4 November 2013 (UTC)
: And for passwords you shouldn't be using a cipher at all, but rather a hash function. (Or a cipher in one of the approved hash constructions, if you must.) And really you shouldn't be using a standard hash function, but be following best practices for passwords instead: salting the hash, using a *slow* hash function, etc. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)

Hmm, i'm rather confused about the last few on the list though. Assumedly the password for "he did the mash, he did the" would be "monster mash", but that would leave "purloined" with a password of either "monsterm" or "monster ". which doesn't make much sense. [[Special:Contributions/108.162.240.18|108.162.240.18]] 13:47, 4 November 2013 (UTC)

(charlie sheen) a1f9b2b6299e7a2b eadec1e6ab797397 sexy earlobes - He did a 2 and a half men episode on sexy earlobes
:(charlie x) a1f9b2b6299e7a2b 617ab0277727ad85 best tos episode - Star Trek has so many good episodes...
::(houstontx) 39738b7adb0b8af7 617ab0277727ad85 sugarland - Sugarland is in Houston, TX

I don't know about anyone else, but the "hints" column incidentally reminded me of {{w|Darwinian poetry|Darwinian Poetry}}... Not intentionally, I'm sure. [[Special:Contributions/141.101.98.214|141.101.98.214]] 14:46, 4 November 2013 (UTC)

Somehow I've missed out on this issue until this comic alerted me to it, but: once a few passwords are correctly guessed, does that make it straightforward to recover the encryption key, and then be able to decrypt '''all''' of them? —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 14:50, 4 November 2013 (UTC)

: Answering my own question: not really straightforward, no. 3DES is still pretty strong, and what knowing a few passwords gives you is a known-plaintext attack, which helps a little, but is by no means a giveaway. —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 15:00, 4 November 2013 (UTC)

:: Note that if blackhat used this service, he would know at least one plaintext - his own password--[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 15:05, 4 November 2013 (UTC)

:No, for calculating the encryption key of Triple DES, there is no real benefit in knowing million passwords, you would still need to brute force it. You would need to know at least 232 different passwords to make it easier but you can't do that with the leaked file (there are about 30 times less of them and moreover many of them are not unique). [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 16:08, 4 November 2013 (UTC)

Okay, so the first column is the encrypted password, the second one is the hint chosen by user. What do rectangles mean? [[Special:Contributions/173.245.53.151|173.245.53.151]] 15:28, 4 November 2013 (UTC)
:That are the fields to fill the characters in just as you do in a crossword puzzle. There are small fields at the beginning that take one character each and one large field at the end that takes one to eight characters. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 15:32, 4 November 2013 (UTC)

Water 3 is an egg group: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) . Given the length of the key, it will probably be 9-16 characters. (Crawdaunt, tentacool, and tentacruel are most likely) [[Special:Contributions/199.27.128.139|199.27.128.139]] 15:43, 4 November 2013 (UTC)
:-- which means 9dca1d79d4dec6d5 is either L, EL, or T, but I can't find a way for that to match up with any variation of "monster mash." [[Special:Contributions/173.245.55.209|173.245.55.209]] 16:15, 4 November 2013 (UTC)
:: Same problem here... Monster mash must not be correct, but it is one of the easier ones, I can't give up on it. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:35, 4 November 2013 (UTC)
::: Maybe, he did the MASH is about the book, movie or TV Show M*A*S*H instead? --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:49, 4 November 2013 (UTC)
:: Monster Mash was written by Bobby Pickett, maybe it has something to do with him? [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:38, 4 November 2013 (UTC)
::: Maybe it's not "monster mash" but just "monster". This would allow the Water-3 Pokemon to be "Cloyster". [[Special:Contributions/108.162.237.5|108.162.237.5]] 19:17, 4 November 2013 (UTC)
:::: You are having trouble counting to eight. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)
::::: You are forgetting the space. Assuming space is stored as a null character, this might actually work.[[Special:Contributions/173.245.54.29|173.245.54.29]] 01:43, 5 November 2013 (UTC)
:::::: Nobody in their right mind would encode spaces as nulls. For us to suppose that they did, we'd need to have some specific clue to that effect. [[Special:Contributions/108.162.238.5|108.162.238.5]] 09:08, 5 November 2013 (UTC)

It seems to me there are two puzzles here, if folks are right that this is not actual data from the hack. 1) Figure out Adobe's master 3DES encryption password, for the big prize. 2) figure out Randall's 3DES encryption password for this puzzle based on these hints, and knowing it will be something clever. [[User:Nealmcb|Nealmcb]] ([[User talk:Nealmcb|talk]]) 16:12, 4 November 2013 (UTC)

Trying to decode the passwords (As Randall obviously wants us to)
"with your own hand you have done all this" is from the book of Judith.
Working on decoding the others. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:13, 4 November 2013 (UTC)

8babb6299e06eb6d = password
a0a2876eb1ea1fea = 1
85e9da81a8a78adc = 57
--[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 18:10, 4 November 2013 (UTC)

Weather Vane Sword may be a reference to Game of Thrones Ascent. The "Sworn Sword", I believe is "Rona" which is also a name. [[Special:Contributions/173.245.55.216|173.245.55.216]] 18:27, 4 November 2013 (UTC)
: It needs to be a name of an apostle (as per line 7) and have 7 or 8 characters (as line 3 needs a continuation) so this leaves Matthew, Thaddeus and (Judas) Iscariot. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:57, 4 November 2013 (UTC)

If a password(or 8 character segment) is guessed can it be confirmed? Somebody should take this leaked list and create a website that presents it like in the comment and lets people guess. It can fill in the guessed ones. [[Special:Contributions/108.162.246.117|108.162.246.117]] 19:17, 4 November 2013 (UTC)

I'm putting in Mattias for the sword, name1 and disciple because of Saint Matthias [http://en.wikipedia.org/wiki/Saint_Matthias] and Redwall Matthias [http://redwall.wikia.com/wiki/Matthias] who held the Weathervane Sword (Also known as the sword of Martin [http://redwall.wikia.com/wiki/The_Sword_of_Martin] ) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)
: I've also removed "monster mash" from the list as it can't be right. Doesn't match the pokemon or the purloined clues. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)

Based on the Water-3 Pokemon hint, the only possibilities of more than 8 characters are tentacool, tentacruel, barbaracle, crawdaunt, carracosta, clauncher, and clawitzer. This would mean "9dca1d79d4dec6d5" would be l, el, le, t, ta, or r. --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 19:51, 4 November 2013 (UTC)
: This is assuming there are no characters before the actual name of the pokemon. [[Special:Contributions/173.245.55.209|173.245.55.209]] 20:30, 4 November 2013 (UTC)
: Assuming Randall has constructed this comic to have a unique answer, it can't end in r because then the clue would be ambiguous (could be clauncher or clawitzer). [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Some of these can be ruled out; it's very unlikely to be a Generation VI Pokémon (Barbaracle, Clauncher and Clawitzer) as this has only just come out and someone would have had to set up their pasword within the last few weeks. And the Pokémon that are also in the Water-1 group are probably more likely to be thought of as Water-1 than Water-3 (Crawdaunt and Carracosta). This only leaves Tentacool and Tentacruel as longer than 8 letter Water-3 only Pokémon that have been known of for a reasonable length of time; and Tentacool is no one's favourite, as the annoying multitude of them that show up whenever you try to Surf anyway makes them as reviled as Zubats in caves, if not moreso. :P Of course, the password need not be simply the Pokémon's name alone. "SexyShellder" "Cloyster1987" "Misty'sStarmie"... Who knows? [[Special:Contributions/141.101.99.252|141.101.99.252]] 01:03, 5 November 2013 (UTC)

I don't know the answer to the end either, but here's a list of people who did the Monster Mash, from Wikipedia:
* Bobby Picket (as Boris Picket)
* Garpax Records (Gary S. Paxton)
* The Misfits
* far, far too many other covers to list
And here's some synonyms for "purloined", from thesaurus.com:
* stole
* pilfered
* filched
* misappropriated
* embezzled
* burglarized
* shoplifted
* poached
* pillaged
* cheated
* pinched
* heisted
* thieved
* plundered
* appropriated
* lifted
* took
* snitched
* defrauded
* swindled
* ripped off
* made off with
Good luck with these!
—[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:31, 4 November 2013 (UTC)

What about Purloined referring to "The Purloined Letter?" When choosing hints, people, at least in my experience, tend to use word association rather than synonyms. [[Special:Contributions/173.245.55.209|173.245.55.209]]

Purloined could also be a reference to the Monster.com hack (http://www.symantec.com/connect/blogs/monster-trojan). [[Special:Contributions/108.162.237.11|108.162.237.11]] 21:00, 4 November 2013 (UTC)

Words meaning purloined that can have the listed suffixes could be '''embezzle'''/'''embezzler''' or '''scrounge'''/'''scrounger'''. Not sure if it fits to the mash clue. There was a loan shark character who would acquire things on MASH called Rizzo, it is a stretch though. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:01, 4 November 2013 (UTC)

I'm still trying to figure out how the solutions go into the spaces on the right -- it may be more obvious once the last couple clues are figured out. I suspect the ordering and numbers of clues have some sort of meaning. Why are there 5 of the 877... passwords, 2 with no clues? Why is one of the 4e18.... passwords separated from the rest? [[Special:Contributions/108.162.221.28|108.162.221.28]] 21:07, 4 November 2013 (UTC)

Could Purloined be a reference to the "Purloined Shadows" book in Elder Scrolls? --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 21:09, 4 November 2013 (UTC)
: Or 'The Purloined Payroll', a WoW quest? "Purloined in Petrograd" is also a lyric to a Decemberists song (The Bagman's Gambit). Google n-grams suggests that "Purloined Image", and "purloined documents" are a Thing. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:58, 4 November 2013 (UTC)

Purloined could be a reference to something that is known as have been stolen like a work of art, or it could be something that was stolen in an XKCD comic. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:18, 4 November 2013 (UTC)

'''EdgarPoe'''(author of The Purloined Letter)/'''EdgarPoet''' fits, but again not really anything to do with MASH. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:27, 4 November 2013 (UTC)

Water-3 pokemon (egg group) are given here: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) ...if I split off the letters of their names after the 8th letter, we see l, el, le, t, ta, and r. So the MASH item ends with one of those suffixes. [[Special:Contributions/199.27.128.167|199.27.128.167]] 21:31, 4 November 2013 (UTC)
: Can't end in 'r', because then that clue would be ambiguous. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Speaking of pokemon, could the clue to purloined have something to do with the pokemon Purrloin? http://bulbapedia.bulbagarden.net/wiki/Purrloin_(Pok%C3%A9mon) [[Special:Contributions/108.162.221.43|108.162.221.43]] 23:51, 4 November 2013 (UTC)

Is there a reason "MASH" is capitalized in the above sections? Given the context, it shouldn't be, and I still haven't given up on the password being a reference to the monster mash. That said, we can't ignore the movie/show MASH.
Also, now that I think about it: pokeMONstermash? I don't know, just throwing ideas out :P [[Special:Contributions/173.245.55.209|173.245.55.209]] 22:08, 4 November 2013 (UTC)

On [http://de.reddit.com/r/programming/comments/1pvwyf/xkcd_encryptic_analysis_at_the_link_below/ reddit] they suggest "Letterman" (which is wrong, too many letters) based on the M*A*S*H episode, "Letters". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:11, 4 November 2013 (UTC)
:...on the other hand, I wonder if an answer like "ALANALDA" would work? As in, someone who "did the M*A*S*H"... [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:13, 4 November 2013 (UTC)
:: Sadly, no. Because it needs to be more than 8 characters. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 22:17, 4 November 2013 (UTC)
::: No, I mean, "an answer of this form", not ALANALDA exactly. The Edgar Allan / Alan Alda congruence is tasty, but I can't make it work. ALLANPOE works as an answer for "Purloined" but that makes something like ALLANPOET the answer to "he did the MASH" (CRAWDAUNT is then the pokemon). But that's misspelling Alda's name for the MASH clue, doesn't quite work. There's also JAMIEFARR (Cpl Klinger) as a better answer to "he did the MASH" but then that makes JAMIEFAR the answer to "purloined" and I can't plausibly make that work. ALLANARBUS is another M*A*S*H actor, but that doesn't work at all. Can anyone come up with other/better ideas in this vein? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:31, 4 November 2013 (UTC)
::: Don't misspell Alda's name; misspell Poe's! —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 02:07, 5 November 2013 (UTC)

In crossword puzzles, a clue ending in -ed (like 'purloined') is most commonly a hint that the answer ends in 'ed'. Cross referencing that with the Pokemon clue, the solution for "he did the MASH" becomes a nine or ten letter answer ending in: -edl, -edel, -edle, -edt, or -edta (excluding -edr due to non-uniqueness), with ......edle looking the most "English-y" to me. My hunch would be something else Robert Altman or Alan Alda "did"... but nothing seems to end in 'edle.' --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 23:07, 4 November 2013 (UTC)
: There is no indication that this is a standard crossword. Most users don't respect crossword conventions when writing password hints. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
:: Aside from the title. And the text. And the fact these didn't come from users, but were just chosen for a puzzle designed by Randall, who would include just this sort of puzzler hint/in-joke in a comic about puzzles. It's moot, because no synonyms for 'stolen' make any sense with a couple other letters tacked on the end. But still, there've been worse hunches. --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 00:45, 5 November 2013 (UTC)

For all we know, his favourite Water-3 Pokémon could be Shell Smash Cloyster or Shell Smash Omastar - "OmastarSmash" as a password would fit in with "Monster mash". [[Special:Contributions/141.101.99.252|141.101.99.252]] 23:16, 4 November 2013 (UTC)
: I like that idea, although it leaves "Monster " (with a trailing space) as the answer to "Purloined", which makes no sense. But interesting idea. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 00:00, 5 November 2013 (UTC)

MonsterMash
MonsterM
TheWiscash {{unsigned|Jcupcake}}
: It's "Whiscash", and it's Water 2 (not 3) and "MonsterM" makes no sense as an answer for the hint "Purloined". But I like the idea of adding "The" in front of the pokemon answer; perhaps we're being too restrictive by looking only at pokemon with length > 8. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
::Yeah, sorry about the typo - last one would be TheWhiscash. MonsterM absolutely makes sense. http://www.hoax-slayer.com/monster-666.shtml The purloined letter here IS M [[User:Jcupcake|Jcupcake]] ([[User talk:Jcupcake|talk]]) 02:40, 5 November 2013 (UTC)

So somewhere above this someone pointed out that purloined could refer to a monster.com hack...in which case, could the first two passwords be "monster mash" and "monster"? That would allow for another previous suggestion of "OmastarSmash" Also, here's my IP Address and a remarkably not-random timestamp: [[Special:Contributions/108.162.219.195|108.162.219.195]] 01:31, 5 November 2013 (UTC)

It could also be that there are modifiers to the base. I always thought of Monster Mash as MonstaMash. This would line up closely with My Corphish written as "mycorphish" My favorite pokemon is my pikachu not just any pikachu, but mine, sort of logic. [[User:Bitassassin|Bitassassin]] ([[User talk:Bitassassin|talk]]) 01:43, 5 November 2013 (UTC)

Could "he did the mash" be referring to brewing and/or the Maillard reaction? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 05:32, 5 November 2013 (UTC)

I was just thinking that "MonsterM Ash", "MonsterM", both seem to make sense, and Ash had a few water pokemon in the water 3 egg group, so could it potentially be something along the lines of "Corphish Ash"? That was the only 8 letter water 3 pokemon he had and it fits with the other clues [[User:NewToThis|NewToThis]] ([[User talk:NewToThis|talk]]) 07:25, 5 November 2013 (UTC)

Has the idea of pokemon fusion been considered? http://pokemon.alexonsager.net/ referenced by http://kotaku.com/how-the-website-that-lets-you-create-frankenstein-pokem-510517336
--[[User:Oukansz|Oukansz]] ([[User talk:Oukansz|talk]]) 19:25, 5 November 2013 (UTC)

;Fanservice

Randall must know about this site. This comic doesn't work without people to crack the code. Should we have a fanservice category? :-) --[[User:SurturZ|SurturZ]] ([[User talk:SurturZ|talk]]) 23:32, 4 November 2013 (UTC)

I'm beginning to suspect that the wide boxes will have the key in it. Assuming he used regular DES (or DES3, for that matter, but using the same 8-byte key 3 times), it could be plausible. The 5 in the middle could be 'abcde', a lot of the other 'second halves' are numbers, and the likely known one that's not seems to be an 'x' -- which could certainly be involved in writing a hex number... problem is there's 11 of those boxes. Trying to guess what signficance the positioning of those boxes have. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:00, 5 November 2013 (UTC)

Actually, it looks like the boxes line up perfectly such that the wide bits (for second-half) will only touch the words they apply to. Order will be more or less what they are (I see the wide boxes as, in order, 1, 57, 10, Sheen, and X, with the 8 char boxes as Matthias, Password, Judith15, Charlie, and HoustonT). The next 5 are odd -- I'm not sure if we repeat the alpha/obvious password 5 times, or it's 5 chars long (abcde) and one per box. The last set is still under discussion, of course. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:20, 5 November 2013 (UTC)

;MASH capitalized
I'm currently chasing down the idea that MASH refers to [[Wikipedia:MASH-1]]. Haven't seen any name yet that looks like it might satisfy "Purloined". - [[User:BozoTheScary|BozoTheScary]] ([[User talk:BozoTheScary|talk]]) 01:56, 5 November 2013 (UTC)

I think MASH is a transcribing error. The comic doesn't have any difference on those letters as far as I can tell. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:18, 5 November 2013 (UTC)

The Purloined Letter is a Edgar Alan Poe story starring C. Auguste Dupin. Might help. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:08, 5 November 2013 (UTC)

There is also a strong association between the Monster Mash and the Mashed Potato, just throwing another idea into the ring. Also try the name BobbyPickett. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:22, 5 November 2013 (UTC)

Frankenstein did the Monster Mash in the cartoon for the song. That leads to a Pokemon card ending in 'tein' and 'frankens' for the hint Purloined. I could not find a Pokemon card that ended in 'tein' nor could I link 'frankens' with Purloined. I ran 'frankens' through Google Translate but found nothing. Also, it's the same password for the "monster mash" hint and the entry with no password hint so I think it's an obvious password (something someone can recall without a hint). Frankenstein fits that part but not the other ones. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:35, 5 November 2013 (UTC)

My $0.02: "He did the mash..." might allude to the expression "doing the math" only (intentionally) misspelled and something like "numbert" or "numb" could be the answer. --[[User:RagnarDa|RagnarDa]] ([[User talk:RagnarDa|talk]]) 04:01, 5 November 2013 (UTC)

graveyard smash fits for the first clue (though lyrically incorrect). Gives smash as second block, but cannot find association between graveyard and purloined. [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:08, 5 November 2013 (UTC)

If we take The Monster Mash for the first answer, it could be written as TheMonsterMash or The Monster Mash, giving either TheMonst erMash or The Mons ter Mash as the two blocks. This gives either Themonst or The Mons as Purloined and either ermash or ter Mash for second block of pokemon answer. Suggestions? [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:15, 5 November 2013 (UTC)
: Only problem is that the word "the" is the last word of the hint.[[Special:Contributions/108.162.237.117|108.162.237.117]] 04:51, 5 November 2013 (UTC)

I know that the water-3 group is not the same, but it seems like an odd coincidence that another pokemon group is the "monster" group. --[[User:Natnee|Natnee]] ([[User talk:Natnee|talk]]) 04:44, 5 November 2013 (UTC)

There is a Scooby Doo comic book story titled "[The Purloined Poe-M](http://scoobydoo.wikia.com/wiki/The_Purloined_Poe-M)", which has an odd similarity to the "MonsterM" possible password. This would leave the pokemon password ending "ash" who, of course, is a pokemon character ... which makes no sense in that place. [[Special:Contributions/199.27.128.83|199.27.128.83]] 05:51, 5 November 2013 (UTC)

Here's one that fits: 
facemash4077 (Combination of facemash by zuckerberg and M*A*S*H) 
facemash (Site made by Zuck in The Social network.) 

Maybe facmashklinger.. The eggklinger being a water-3 Pokemon? [[Special:Contributions/108.162.215.39|108.162.215.39]] 06:14, 5 November 2013 (UTC)rbnm

[http://en.wikipedia.org/wiki/John_Orchard John Orchard] played in M*A*S*H and also was in the movie "The Letter" [[Special:Contributions/108.162.250.8|108.162.250.8]] 05:02, 6 November 2013 (UTC)

;Working Backwards
I'm attempting to take a different tact, by trying to find the key itself. I'm assuming its something easy to guess. I've tried the top 100 Adobe passwords (you can get them [http://stricture-group.com/files/adobe-top100.txt here]) using the following bash script (testing the word "matthias", as this one seems pretty certain):

<code>
while read p; do echo -n $p\: && echo -n "matthias" | openssl enc -e -des-ede3 -nosalt -nopad -pass pass:$p | xxd -p; done < passwords.txt
</code>

For this to work, I pre-processed the top 100 passwords file with:

<code>
cat adobe-top100.txt | cut -c51- > passwords.txt
</code>

…and then trimmed the cruft with a text editor (leading text paragraph and table headers). So far no luck; perhaps someone with more time on their hands can try some obvious XKCD-related passwords (I've tried XKCD, xkcd, xkcd.com, randall, rmunroe, encryptic, and Encrytic) and see if the encrypted version(s) match up with what we have here. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:27, 5 November 2013 (UTC)
:I should mention that I've also tried OpenSSL's des-ede mode and des-ecb, as Im not sure if Randall used one, two, or three key mode. I'm also assuming the key has been generated from the password using OpenSSL's default key generation method, any of with I suppose could be incorrect. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:39, 5 November 2013 (UTC)
:: Nice work. Note that the puzzle is very specific about using "block mode 3-DES" (usually called "ECB"). DES keys are actually 56 bits; each of the 8 bytes has odd parity (the number of 1 bits is odd). From [https://en.wikipedia.org/wiki/Data_Encryption_Standard wp], "Bits 8, 16,..., 64 are for use in ensuring that each byte is of odd parity." As a wild guess, I'd suggest that, if Randall chose a readable 8-ASCII-character passphrase, he also selected only characters that would make the parity bit zero (so that the result was ASCII). That is, <code><nowiki>[ #%&)*,/12478;=>@CEFIJLOQRTWX[]^abdghkmnpsuvyz|]</nowiki></code>. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:34, 5 November 2013 (UTC)
::: Uh, hold one. Read the "Explanation" section above. It's clear that the hashes are not real, so brute-forcing the key isn't going to work. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:48, 5 November 2013 (UTC)
:::: Just to note, there are actually three options for keys in TripleDES: having three independent keys (K1, K2, K3), having two independent keys (K1, K2, K1), or using a single key (K1, K1, K1). When run in ECB mode, OpenSSL calls these '''des-ede3''' and '''des-ede''' for options 1 and 2 (option 3 is for backwards compatibility with DES, and can be run using just '''des-ecb'''). See [http://en.wikipedia.org/wiki/Triple_DES#Keying_options Triple DES - Keying Options] for details. In addition, the password and the key are two different entities -- typically the password is run through a keying algorithm first (commonly [http://en.wikipedia.org/wiki/PBKDF2 PBKDF2] for 3DES), so there is no need to select password characters based on parity patterns. All of which is moot now that we know that the data isn't in fact TripleDES encrypted in the first place. I'm actually disappointed in Randall now :P. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 19:01, 5 November 2013 (UTC)

I Hadn't seen it mentioned yet, but Monster Mash was written by Robert George Pickett (http://en.wikipedia.org/wiki/Bobby_Pickett), Whose last name goes closely with the second clue, Purloined, which means "stolen". I can't make it work, but I figured it was worth pointing out. (Nov 5th 1:26 pm utc ) [[Special:Contributions/173.245.56.24|173.245.56.24]] 13:27, 5 November 2013 (UTC)
: It's a good connection. Maybe we should reorganize the discussion and start a list of "interesting ideas we can't quite make work" in the hopes that someone else has an insight. Edgar Allan / Alan Alda, Pickett / "Pick it", Klinger / Kingler, etc. Most of these are just manifestation of the human brain's ability to find patterns even in random coincidence, of course, but one of them might be on the right track. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

Just quick thoughts.
I feel like Cpl klinger and the water type kingler is too solid a connection to ignore even though I can't really use it.
Kingler was owned in the series by Ash.
Ash is a three letter word and the last three letters of the phrase monstermash.
Monsterm=8 letters so the first block ash=3 letters in the second block.
Monsterm is about the monster.com thing, therefore purloined. It's a double reference, the .co has been purloined from the purloined website.
Then blastoise -3, or rather blastois3 - 3 (mocking the common password meme of replacing letters with numbers)
So the last password, which is super hard to guess and well chosen even with the clue is, blastoisash? It's a feasibly memorable password that would not be quickly forgotten by a pokemon fan while still being hard to guess.
Can you think of a way to check it? Maybe go into the old command line xkcd and try it as a password? (From a contributor to my talk page) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 13:52, 5 November 2013 (UTC)
: That's really a stretch. ".co is purloined from monster.com?" really? The answer will be far more obviously correct... once we figure it out. Look at the other answers, for example. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

;another quick idea for monster mash

It could be deflection. Maybe whoever put it in was paranoid. Or just dumb. Or who knows.

But, there is a pokemon that's in the monster/water(-1) hybrid group called Marshtomp.

Monster mash, mashed (ie anagrammed) can give us all but the P out of that... which is fine, as it's a 9-letter name.

Thus we have E, N and S left over (and indeed a further T, H, E), which could become overall, e.g, Marshtomens (...Marshtomethens? Or w/e), which you can split up as you like to represent something which has been stolen (personally). Possibly in german slang or something. It doesn't have to be a direct thesaurus link, it could well be complete misdirection (on Randall's behalf, or that of his notional Adobe user), same as for the pokemon.

And for the pokemon itself, it could well be "Marshtomp3" ;)

Also, don't forget about reversed words and so-on.

Heck, I've used very personal and/or random things (like, maybe two or three people in the world may recognise it in connection with me, and it's not online, at least not anywhere it can be found - basically it's just in my head and dies with me), reversed, with numbers substituting random characters, as passwords before. That covers each individual base in just one PW...

Now we just have to start feeding the guesses into a hash engine and try to figure out, maybe brute force, what the original key was. Knowing almost all of the other answers already makes this far, far easier for those who may have the facility to run the tests already. [[Special:Contributions/141.101.99.213|141.101.99.213]] 14:54, 5 November 2013 (UTC)
: This is not a real excerpt from the password file, this is a puzzle which Randall made up. Therefore, the answer to the last group will not be random, and it will not be a stretch. It will be obvious (as obvious as the previous ones)... once we figure out the catch. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

FWIW, Eve Online also features a "Purloined Sansha Codebreaker". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:16, 5 November 2013 (UTC)

I agree that the solution has to be obvious - especially after its revealed. If this were a crossword puzzle, then the clues like Purloined might be followed by a question mark. Purloined? a cat that is loined - a cat that is covered with cloths? Puss in boots? Or something along those lines... [[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

purloined=phished (Corphish)? {{unsigned ip|108.162.216.227}}

i wonder if the link between the last three clues is more like a cryptic crossword puzzle---for instance, --purloined= heisted; the other clues reading it as he/is/ted...?--[[User:Wwd|Wwd]] ([[User talk:Wwd|talk]]) 22:40, 5 November 2013 (UTC)

I wonder if the pokemon could be the name of an ubuntu release, per "Not Really Into Pokemon" at http://xkcd.com/178/ --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 22:45, 5 November 2013 (UTC)

You could also abbreviate Robert Pickett's name (the co-writer of Monster Mash) as "Rob Pickett" which goes even more with purloined (the first 8 letters are now "Rob Pick"). [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:21, 6 November 2013 (UTC)

Beings that "did the mash" according to the song http://www.lyricsondemand.com/onehitwonders/monstermashlyrics.html : my monster, the ghouls, Igor, Igor's baying hounds, the coffin-bangers, "The Crypt-Kicker Five", you. Zombies, Wolf Man, Dracula/Drac, and Boris were also mentioned, but they didn't do the mash. Hope that helps someone (doesn't help me). [[User:DPWally|DPWally]] ([[User talk:DPWally|talk]]) 23:05, 6 November 2013 (UTC)

;Capitalization hints?

I have no idea who first put the capital letters in "MASH" and "Purloined" in the transcript (and I don't want to check), but now that I've gotten rid of the second (after somebody else got rid of the first), I want to record them here for the record. Possibly Randall put them in and was feeding us clues (so ''MASH'' the book or movie, and ''Purloined'' a title such as Poe's). I consider this unlikely (after all, I removed one of these capitalizations), but the possibility should be recorded. —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 01:17, 6 November 2013 (UTC)

I can't be a coincidence that this comes up as the top google news search for 'purloined:' http://www.theregister.co.uk/2013/11/05/adobe_users_purloined_passwords_were_pathetic/ {{unsigned ip|108.162.246.120}}

"38a7c9279cadeb44 9dca1d79d4dec6d5 he did the mash, he did the": Ministermash (sounds like monster mash)
"38a7c9279cadeb44 purloined": Minister (based on the character Minister D-, who stole the letter in the Edgar Allen Poe story)
"a8ae5754a2b7af7a 9dca1d79d4dec6d5 fav water-3 pokemon": OmastarSmash (Shell Smash Omastar)
So,38a7c9279cadeb44 = minister, 9dca1d79d4dec6d5 = mash, a8ae5754a2b7af7a = omastars
04:07, 6 November 2013 (UTC)
:Probably one of the best complete theories I've heard [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:26, 6 November 2013 (UTC)

I suggest "alligato" (a form of Latin ''alligatus'', perfect passive participle of ''alligo'' "bind up"), and "alligator" (Referencing "Land of 1000 Dances"). [[Special:Contributions/199.27.128.62|199.27.128.62]] 05:37, 6 November 2013 (UTC)

I think there is a transcribe mistake. 
Instead of "fav water-3 pokemon" 
Could it be "fay water-3 pokemon" 
Look at the Y and V letters in the non-chopped letters above. I think it is a Y and not a V. 
{{unsigned ip|108.162.215.51}}
*About the Pokemon, is it possible everyone's ignoring a much simpler explanation? Every Pokemon game begins with a choice of one of the three starter Pokemon, each of which have an evolutionary line of three Pokemon. In first gen, if your "favorite [is] water [from the] 3 Pokemon", then you'll be using Squirtle, followed by Wartortle and Blastoise. 2nd gen: Totodile, Croconaw, Feraligatr. 3rd gen: Mudkip, Marshtomp, Swampert. 4th gen: Piplup, Prinplup, Empoleon. Perhaps the answer uses one of these, or some combination of them? --Anon 08:57, 6 November 2013 (UTC)

Boris Blacher wrote an opera based on 'The purloined letter' This may fit with Bobby 'Boris' Pickett who sang Monster Mash [[User:YellowYeti|YellowYeti]] ([[User talk:YellowYeti|talk]]) 11:11, 6 November 2013 (UTC)

The "Boris" in "Boris Pickett" is a reference to Boris Karloff. (In his other work, Pickett doesn't use that name.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 12:36, 6 November 2013 (UTC)

An alternative tack: how about Barbaracle for the Pokemon, BarbaraC(Jordan) for purloined and Barbara Clark - famous for doing Monster Mash-up novels. Does Barbara Jordan have some purloined link with watergate? {{unsigned ip|108.162.231.16}}
No, because the pokemon has a different starting string as the other two. --[[Special:Contributions/199.27.128.119|199.27.128.119]] 13:48, 6 November 2013 (UTC)

I think it is not coincidence that it is the last one that you can't solve. It may be an experiment by Randall to see if people can find a solution for a puzzle that doesn't make any sense. That said, if it does have a solution, it should not be "monstermash" since that is too close to the clue. If that was the password, everyone could guess it easily from the clue. It has to be one level "removed" from those words, guided by the clues for the matching passwords. The point of the post was that using unsalted crypt in the passwords allows you to combine clues, right? [[Special:Contributions/108.162.219.201|108.162.219.201]] 13:42, 6 November 2013 (UTC)

Not an answer, but maybe an approach: Look at it from the "what piece of information is Randall trying to tell us?" angle. In the first few puzzles, he teaches us the rules of the game. We disambiguate clues by later ones, which we can only do because of the missing salts. For example, the "name and jersey number" just tells us the format of the answer to the previous clue about Judith 15:10. Otherwise, there would have been no way to guess that exact string without the space and colon. Also, "Charlie X" and "Charlie Sheen" demonstrate that spaces are used in a "fair" way. I would not expect a trailing space on a password, for example. So what about the Pokemon then? The first half of the crypt for the Pokemon isn't used anywhere else. The easiest interpretation I can come up with is that this is just trying to restrict the common second part of the word to letters from the list of Water-3 Pokemon. Let's assume it wasn't made very difficult, so take just 'el', 'le', and 'l' from the Water-3-only group on bulbapedia. Then the puzzle is this:

something related to 'monster mash': 8 letters plus the ending 'el', 'le', or 'l'
something related to 'purloined' or related to 'letter': the same 8 letters, minus the ending
pokemon: completely unrelated, just chosen to have a well known list of 9 or 10 letter words to restrict search space for first line

I suck at crosswords, but can someone solve this restated version? There can't be that many 8 letter words that also make a word with 'el', 'le', or 'l' added to them? 15:23, 6 November 2013 (UTC) {{unsigned ip|108.162.219.201}}

: Not to insult your reasoning, which is entirely correct, but I believe your restatement is *exactly* the puzzle that (reasonable) people have been working on (and failing to solve) since Monday. As a long-time mystery hunter, I'd like to suggest the opposite: the continued failure to find some reasonable solution to the puzzle as stated above implies that *at least one* of the assumptions above is wrong. (For the record, I'd broaden your first to "...related to 'monster mash' or the show/film M*A*S*H", but again, that's the assumption we *have* been making.) So I'm especially interested in ideas *different* from the above, at this point, although not necessarily throwing out the bathtub, baby and all. Probably there's a fundamentally different way to read the first clue, or the second, or the third. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: Not insulted at all, just glad if I summarized it correctly, since I was late to the party. Maybe this helps others bootstrap. As requested, a slightly alternate view for clue 1: the word "mash" may not be part of the answer, since it appears in the clue. This means the direct answer to the clue is "monster" and has nothing to do with the song at all. The password could just be the name of a monster that is formed from something purloined plus an short ending. The endings we're already considering make nice monster names.[[Special:Contributions/108.162.219.198|108.162.219.198]] 19:54, 6 November 2013 (UTC)

:::I appreciate the summary, it helped me come up with my "keyboard mash" proposed solution, which you can see below" [[Special:Contributions/108.162.221.16|108.162.221.16]] 21:51, 6 November 2013 (UTC)

Looking at some word lists at http://www.litscape.com/words/ending_with/l/9_letter_l_end_words.html , this doesn't seem to be leading anywhere good. Can someone fix my logic? [[Special:Contributions/108.162.219.201|108.162.219.201]] 15:33, 6 November 2013 (UTC)

Not sure if anyone else has pointed out yet, but there is a pokemon named purrloin http://bulbapedia.bulbagarden.net/wiki/Purrloin_%28Pok%C3%A9mon%29 . That seems like far too much of a coincidence to not be related. [[Special:Contributions/173.245.52.211|173.245.52.211]] 16:17, 6 November 2013 (UTC)
: We'll add it to the long list of suspicious coincidences. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: I don't believe the hints can be related. Note that the Pokemon's name shares zero characters with the answer to the 'purloined' clue, so they are not linked via the same password. Any semantic link is inconsistent with these being password hints from separate (imaginary) users. Maybe Randall subconsciously (or via google) went from purloined to Purrloin to names of Pokemon. [[Special:Contributions/108.162.219.198|108.162.219.198]] 19:20, 6 November 2013 (UTC)

a stretch.. but maybe a starting point?
bootlegd purloined
bootlegd ash he did the..
???whisc ash fav-3
[[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

;Hash collision

Maybe the last clues could be intended to be a hash collision? With 64-bit blocks that seems unlikely, but maybe it's a trick?
[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:29, 6 November 2013 (UTC)
:Finding the probability of a collision amounts to the birthday problem. Assuming the hash function gives all 2^64 hash values with equal probability and there are 153 million unique message blocks (probably right within an order of magnitude), we have:
:
: <pre>Pr[collision] = 1 - exp(-153000000^2/(2*2^64)) = 0.000634</pre>
:
: So the probability of a hash collision from different passwords is still quite low, even with such a large number of passwords. So it's worth assuming that all the identical hash blocks are from the same message, and keep looking for the poke-mash password.
: BTW, getting a 50% chance of a collision requires about <tt>sqrt(-2^65*ln(.5))</tt> = 5 billion unique passwords.
:[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:46, 6 November 2013 (UTC)

'''Explanation for the last 3:'''

He did the mash, he did the "keyboard mash"
ASDFGHJK - L

purloined "one letter from the home row"
ASDFGHJK

Then the third one is TENTACOO - L
[[Special:Contributions/108.162.221.16|108.162.221.16]] 21:45, 6 November 2013 (UTC)
:Purloined seems like a stretch. On the other hand, 'asdfghjkl' is the 56th most common password in the real adobe data, so perhaps you're on to something. [[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 22:08, 6 November 2013 (UTC)
::I don't know, I feel like purloined has got to be a reference to the Poe story. The pun that letter means single character rather than item of correspondence is cute and funny. [[Special:Contributions/108.162.221.16|108.162.221.16]] 22:30, 6 November 2013 (UTC)
:I like this explanation --[[User:Lackadaisical|Lackadaisical]] ([[User talk:Lackadaisical|talk]]) 22:28, 6 November 2013 (UTC)

Why the restriction on the ending of the Pokemon to el, l, etc? There could be an adjective before (i.e. redkingle), so the Pokemon name could extend more into the second frame. The adjective might be some abreviated synonym for favorite, or whatever fav (or fay) stand for. [[Special:Contributions/108.162.215.34|108.162.215.34]] 22:07, 6 November 2013 (UTC)rbnm

;The last clue

Regarding it being actually Fay water-3 pokemon, have a look at this: http://www.serebii.net/e-reader/battle/08.shtml

The trainer is named Fay, and has a Starmie, which is a Water-3 Pokemon according to http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group)

However, its only 7 characters. Not sure if it means anything, but just putting it out there.

EDIT: FayStarmie takes us to 10, leaving 9dca1d79d4dec6d5 meaning 'ie'
EDIT 2: I believe there is a Fay in Pokemon X and Y, but I can't find any information on her. Also Fay could refer to fairy, which is the new type added in Pokemon X and Y, but there doesn't seem to be any fairy Water-3 Pokemon, or any pokemon that reside in both groups. [[User:Haelbarde|Haelbarde]] ([[User talk:Haelbarde|talk]]) 00:24, 7 November 2013 (UTC)

Talk:1286: Encryptic

2013-11-06T23:45:38Z

Haelbarde:

The answer to the weathervane sword/ favorite apostle hint has got to be Matthias. It is 8 characters long, Matthias was the apostle chosen to replace Judas and in the Redwall series Matthias is one of the wielders of the Sword of Martin a sword that was hung on a weathervane.

It is unclear to me if these are actual hashes from Adobe file? That would be very cool... but actual file seems to have passwords in slightly different format. http://arstechnica.com/security/2013/11/how-an-epic-blunder-by-adobe-could-strengthen-hand-of-password-crackers/ [[Special:Contributions/108.162.229.211|108.162.229.211]] 09:05, 4 November 2013 (UTC) pavel

:I wouldn't call 3DES secure ... but yes, in this situation the real problem is not using per-user salt. Note that I would expect that at least some of those examples would be solvable ...any idea? Hmmm ... sword of weather vane and one of apostles might be Martin ([http://redwall.wikia.com/wiki/Sword_of_Martin]) ... -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:00, 4 November 2013 (UTC)

::It's Jonathon (for John). Not sure what it has to do with weather vane swords though... [[Special:Contributions/108.162.240.18|108.162.240.18]] 12:42, 4 November 2013 (UTC)

:Umm. "Peter" does not seem to have 8 characters, does it? Encryption method suggests it should be 8 characters, as do 8 character boxes on the right... [[Special:Contributions/108.162.229.211|108.162.229.211]] 10:43, 4 November 2013 (UTC) pavel

::I'd say "weather vane sword", "name1" and "favorite of 12 apostles" is (Saint) Peter. "Weather vane" as symbol for the rooster in the denial, and the sword Peter used when Jesus was arrested. --[[Special:Contributions/108.162.254.177|108.162.254.177]] 10:25, 4 November 2013 (UTC)

::: ... interesting that google search didn't mentioned it :-) Seems bible have too low pagerank. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:32, 4 November 2013 (UTC)

::: The 'favourite' apostle was John the Evangelist though. http://en.wikipedia.org/wiki/Disciple_whom_Jesus_loved . The other biblical clue here is 'with your own hand you have done all this' - Judith 15:10. If that's Judith1510 then the 'name and shirt number' is 'Judith15'. The TOS/earlobes clue seems to be "Spock's brain" and "Spock's (ears?)". And the Michael Jackson one is (obviously) ABC123. [[Special:Contributions/141.101.99.214|141.101.99.214]] 11:14, 4 November 2013 (UTC)
:::: Perhaps "favorite" in this case refer's to the user's favorite, not Jesus's. [[User:Yomikoma|Yomikoma]] ([[User talk:Yomikoma|talk]]) 16:13, 4 November 2013 (UTC)
:::: The Michael Jackson password should just be "ABC". (The other clue refers only to letters, and the proper song title also has only letters.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:57, 4 November 2013 (UTC)
::: Given that name1 is two blocks long, I would guess that the apostle's name is going to be eight characters long, with the second hash block being 1+seven spaces (or nulls if Adobe pads it with nulls and not spaces). But then again, as the only disciple with a name eight letters long is Thaddeus maybe not {{unsigned ip|141.101.99.214}}

:::: "St.Peter" is 8 characters, and having a "special" character (the period) makes it a good choice for passwords that might require 1 non-alphanumeric character (and ban spaces). [[Special:Contributions/141.101.99.223|141.101.99.223]] 11:47, 4 November 2013 (UTC)

:::: I think it is obvious that Name1 refers to {The user's name} + 1. I wonder though if we should be referring to one of the other 12 apostles in a different context? https://en.wikipedia.org/wiki/Twelve_Apostles_%28disambiguation%29 - [[Special:Contributions/108.162.242.11|108.162.242.11]] 18:02, 4 November 2013 (UTC)
::::: Is the "weathervane sword" referring to Redwall? I haven't read the book myself, but would it be referring to the "Sword of Martin"? [http://redwall.wikia.com/wiki/Sword_of_Martin] --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:17, 4 November 2013 (UTC)

Another article about using passwords hints from multiple users to find the passwords from the breach. http://7habitsofhighlyeffectivehackers.blogspot.com/2013/11/can-someone-be-targeted-using-adobe.html [[User:Bugefun|Bugefun]] ([[User talk:Bugefun|talk]]) 11:06, 4 November 2013 (UTC)

"Sexy earlobes" makes me think of [http://misswiu.livejournal.com/5385.html "The ABC of Aerobics"], but that would make that Shirley Clarke, and nothing in Star Trek has anything to do with Shirley that I am aware of, except possible [http://en.memory-alpha.org/wiki/Ruth Shirley Bonne as Ruth]. I skimmed a list of episode titles, but nothing jumps out at me as particularly earlobish. [[Special:Contributions/108.162.219.187|108.162.219.187]] 11:20, 4 November 2013 (UTC)

:Sexy earlobes might have something to do with Ferengi, but they didn't appeared in TOS. 141.101.99.214's idea is better. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 11:42, 4 November 2013 (UTC)

:OK, we know that "sexy earlobes" and "best TOS Episode" are the same for the first eight character, but differ after that, while "best TOS" and "sugarland" are the same after the first 8 characters. So, my guesses are : Best TOS episode: "Charlie X"; "Sexy Earlobes": Someone with the first name of "Charlie"; "Sugarland": some city in Texas (perhaps "HoustonTX") [[User:JamesCurran|JamesCurran]] ([[User talk:JamesCurran|talk]]) 16:51, 4 November 2013 (UTC)

Note that you should not ever use cipher in {{w|Block_cipher_mode_of_operation#Electronic_codebook_.28ECB.29|ECB (electronic codebook)}} mode, i.e. encrypt each block separately and independently, but use chaining. --[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 12:15, 4 November 2013 (UTC)
: And for passwords you shouldn't be using a cipher at all, but rather a hash function. (Or a cipher in one of the approved hash constructions, if you must.) And really you shouldn't be using a standard hash function, but be following best practices for passwords instead: salting the hash, using a *slow* hash function, etc. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)

Hmm, i'm rather confused about the last few on the list though. Assumedly the password for "he did the mash, he did the" would be "monster mash", but that would leave "purloined" with a password of either "monsterm" or "monster ". which doesn't make much sense. [[Special:Contributions/108.162.240.18|108.162.240.18]] 13:47, 4 November 2013 (UTC)

(charlie sheen) a1f9b2b6299e7a2b eadec1e6ab797397 sexy earlobes - He did a 2 and a half men episode on sexy earlobes
:(charlie x) a1f9b2b6299e7a2b 617ab0277727ad85 best tos episode - Star Trek has so many good episodes...
::(houstontx) 39738b7adb0b8af7 617ab0277727ad85 sugarland - Sugarland is in Houston, TX

I don't know about anyone else, but the "hints" column incidentally reminded me of {{w|Darwinian poetry|Darwinian Poetry}}... Not intentionally, I'm sure. [[Special:Contributions/141.101.98.214|141.101.98.214]] 14:46, 4 November 2013 (UTC)

Somehow I've missed out on this issue until this comic alerted me to it, but: once a few passwords are correctly guessed, does that make it straightforward to recover the encryption key, and then be able to decrypt '''all''' of them? —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 14:50, 4 November 2013 (UTC)

: Answering my own question: not really straightforward, no. 3DES is still pretty strong, and what knowing a few passwords gives you is a known-plaintext attack, which helps a little, but is by no means a giveaway. —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 15:00, 4 November 2013 (UTC)

:: Note that if blackhat used this service, he would know at least one plaintext - his own password--[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 15:05, 4 November 2013 (UTC)

:No, for calculating the encryption key of Triple DES, there is no real benefit in knowing million passwords, you would still need to brute force it. You would need to know at least 232 different passwords to make it easier but you can't do that with the leaked file (there are about 30 times less of them and moreover many of them are not unique). [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 16:08, 4 November 2013 (UTC)

Okay, so the first column is the encrypted password, the second one is the hint chosen by user. What do rectangles mean? [[Special:Contributions/173.245.53.151|173.245.53.151]] 15:28, 4 November 2013 (UTC)
:That are the fields to fill the characters in just as you do in a crossword puzzle. There are small fields at the beginning that take one character each and one large field at the end that takes one to eight characters. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 15:32, 4 November 2013 (UTC)

Water 3 is an egg group: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) . Given the length of the key, it will probably be 9-16 characters. (Crawdaunt, tentacool, and tentacruel are most likely) [[Special:Contributions/199.27.128.139|199.27.128.139]] 15:43, 4 November 2013 (UTC)
:-- which means 9dca1d79d4dec6d5 is either L, EL, or T, but I can't find a way for that to match up with any variation of "monster mash." [[Special:Contributions/173.245.55.209|173.245.55.209]] 16:15, 4 November 2013 (UTC)
:: Same problem here... Monster mash must not be correct, but it is one of the easier ones, I can't give up on it. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:35, 4 November 2013 (UTC)
::: Maybe, he did the MASH is about the book, movie or TV Show M*A*S*H instead? --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:49, 4 November 2013 (UTC)
:: Monster Mash was written by Bobby Pickett, maybe it has something to do with him? [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:38, 4 November 2013 (UTC)
::: Maybe it's not "monster mash" but just "monster". This would allow the Water-3 Pokemon to be "Cloyster". [[Special:Contributions/108.162.237.5|108.162.237.5]] 19:17, 4 November 2013 (UTC)
:::: You are having trouble counting to eight. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)
::::: You are forgetting the space. Assuming space is stored as a null character, this might actually work.[[Special:Contributions/173.245.54.29|173.245.54.29]] 01:43, 5 November 2013 (UTC)
:::::: Nobody in their right mind would encode spaces as nulls. For us to suppose that they did, we'd need to have some specific clue to that effect. [[Special:Contributions/108.162.238.5|108.162.238.5]] 09:08, 5 November 2013 (UTC)

It seems to me there are two puzzles here, if folks are right that this is not actual data from the hack. 1) Figure out Adobe's master 3DES encryption password, for the big prize. 2) figure out Randall's 3DES encryption password for this puzzle based on these hints, and knowing it will be something clever. [[User:Nealmcb|Nealmcb]] ([[User talk:Nealmcb|talk]]) 16:12, 4 November 2013 (UTC)

Trying to decode the passwords (As Randall obviously wants us to)
"with your own hand you have done all this" is from the book of Judith.
Working on decoding the others. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:13, 4 November 2013 (UTC)

8babb6299e06eb6d = password
a0a2876eb1ea1fea = 1
85e9da81a8a78adc = 57
--[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 18:10, 4 November 2013 (UTC)

Weather Vane Sword may be a reference to Game of Thrones Ascent. The "Sworn Sword", I believe is "Rona" which is also a name. [[Special:Contributions/173.245.55.216|173.245.55.216]] 18:27, 4 November 2013 (UTC)
: It needs to be a name of an apostle (as per line 7) and have 7 or 8 characters (as line 3 needs a continuation) so this leaves Matthew, Thaddeus and (Judas) Iscariot. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:57, 4 November 2013 (UTC)

If a password(or 8 character segment) is guessed can it be confirmed? Somebody should take this leaked list and create a website that presents it like in the comment and lets people guess. It can fill in the guessed ones. [[Special:Contributions/108.162.246.117|108.162.246.117]] 19:17, 4 November 2013 (UTC)

I'm putting in Mattias for the sword, name1 and disciple because of Saint Matthias [http://en.wikipedia.org/wiki/Saint_Matthias] and Redwall Matthias [http://redwall.wikia.com/wiki/Matthias] who held the Weathervane Sword (Also known as the sword of Martin [http://redwall.wikia.com/wiki/The_Sword_of_Martin] ) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)
: I've also removed "monster mash" from the list as it can't be right. Doesn't match the pokemon or the purloined clues. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)

Based on the Water-3 Pokemon hint, the only possibilities of more than 8 characters are tentacool, tentacruel, barbaracle, crawdaunt, carracosta, clauncher, and clawitzer. This would mean "9dca1d79d4dec6d5" would be l, el, le, t, ta, or r. --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 19:51, 4 November 2013 (UTC)
: This is assuming there are no characters before the actual name of the pokemon. [[Special:Contributions/173.245.55.209|173.245.55.209]] 20:30, 4 November 2013 (UTC)
: Assuming Randall has constructed this comic to have a unique answer, it can't end in r because then the clue would be ambiguous (could be clauncher or clawitzer). [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Some of these can be ruled out; it's very unlikely to be a Generation VI Pokémon (Barbaracle, Clauncher and Clawitzer) as this has only just come out and someone would have had to set up their pasword within the last few weeks. And the Pokémon that are also in the Water-1 group are probably more likely to be thought of as Water-1 than Water-3 (Crawdaunt and Carracosta). This only leaves Tentacool and Tentacruel as longer than 8 letter Water-3 only Pokémon that have been known of for a reasonable length of time; and Tentacool is no one's favourite, as the annoying multitude of them that show up whenever you try to Surf anyway makes them as reviled as Zubats in caves, if not moreso. :P Of course, the password need not be simply the Pokémon's name alone. "SexyShellder" "Cloyster1987" "Misty'sStarmie"... Who knows? [[Special:Contributions/141.101.99.252|141.101.99.252]] 01:03, 5 November 2013 (UTC)

I don't know the answer to the end either, but here's a list of people who did the Monster Mash, from Wikipedia:
* Bobby Picket (as Boris Picket)
* Garpax Records (Gary S. Paxton)
* The Misfits
* far, far too many other covers to list
And here's some synonyms for "purloined", from thesaurus.com:
* stole
* pilfered
* filched
* misappropriated
* embezzled
* burglarized
* shoplifted
* poached
* pillaged
* cheated
* pinched
* heisted
* thieved
* plundered
* appropriated
* lifted
* took
* snitched
* defrauded
* swindled
* ripped off
* made off with
Good luck with these!
—[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:31, 4 November 2013 (UTC)

What about Purloined referring to "The Purloined Letter?" When choosing hints, people, at least in my experience, tend to use word association rather than synonyms. [[Special:Contributions/173.245.55.209|173.245.55.209]]

Purloined could also be a reference to the Monster.com hack (http://www.symantec.com/connect/blogs/monster-trojan). [[Special:Contributions/108.162.237.11|108.162.237.11]] 21:00, 4 November 2013 (UTC)

Words meaning purloined that can have the listed suffixes could be '''embezzle'''/'''embezzler''' or '''scrounge'''/'''scrounger'''. Not sure if it fits to the mash clue. There was a loan shark character who would acquire things on MASH called Rizzo, it is a stretch though. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:01, 4 November 2013 (UTC)

I'm still trying to figure out how the solutions go into the spaces on the right -- it may be more obvious once the last couple clues are figured out. I suspect the ordering and numbers of clues have some sort of meaning. Why are there 5 of the 877... passwords, 2 with no clues? Why is one of the 4e18.... passwords separated from the rest? [[Special:Contributions/108.162.221.28|108.162.221.28]] 21:07, 4 November 2013 (UTC)

Could Purloined be a reference to the "Purloined Shadows" book in Elder Scrolls? --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 21:09, 4 November 2013 (UTC)
: Or 'The Purloined Payroll', a WoW quest? "Purloined in Petrograd" is also a lyric to a Decemberists song (The Bagman's Gambit). Google n-grams suggests that "Purloined Image", and "purloined documents" are a Thing. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:58, 4 November 2013 (UTC)

Purloined could be a reference to something that is known as have been stolen like a work of art, or it could be something that was stolen in an XKCD comic. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:18, 4 November 2013 (UTC)

'''EdgarPoe'''(author of The Purloined Letter)/'''EdgarPoet''' fits, but again not really anything to do with MASH. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:27, 4 November 2013 (UTC)

Water-3 pokemon (egg group) are given here: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) ...if I split off the letters of their names after the 8th letter, we see l, el, le, t, ta, and r. So the MASH item ends with one of those suffixes. [[Special:Contributions/199.27.128.167|199.27.128.167]] 21:31, 4 November 2013 (UTC)
: Can't end in 'r', because then that clue would be ambiguous. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Speaking of pokemon, could the clue to purloined have something to do with the pokemon Purrloin? http://bulbapedia.bulbagarden.net/wiki/Purrloin_(Pok%C3%A9mon) [[Special:Contributions/108.162.221.43|108.162.221.43]] 23:51, 4 November 2013 (UTC)

Is there a reason "MASH" is capitalized in the above sections? Given the context, it shouldn't be, and I still haven't given up on the password being a reference to the monster mash. That said, we can't ignore the movie/show MASH.
Also, now that I think about it: pokeMONstermash? I don't know, just throwing ideas out :P [[Special:Contributions/173.245.55.209|173.245.55.209]] 22:08, 4 November 2013 (UTC)

On [http://de.reddit.com/r/programming/comments/1pvwyf/xkcd_encryptic_analysis_at_the_link_below/ reddit] they suggest "Letterman" (which is wrong, too many letters) based on the M*A*S*H episode, "Letters". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:11, 4 November 2013 (UTC)
:...on the other hand, I wonder if an answer like "ALANALDA" would work? As in, someone who "did the M*A*S*H"... [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:13, 4 November 2013 (UTC)
:: Sadly, no. Because it needs to be more than 8 characters. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 22:17, 4 November 2013 (UTC)
::: No, I mean, "an answer of this form", not ALANALDA exactly. The Edgar Allan / Alan Alda congruence is tasty, but I can't make it work. ALLANPOE works as an answer for "Purloined" but that makes something like ALLANPOET the answer to "he did the MASH" (CRAWDAUNT is then the pokemon). But that's misspelling Alda's name for the MASH clue, doesn't quite work. There's also JAMIEFARR (Cpl Klinger) as a better answer to "he did the MASH" but then that makes JAMIEFAR the answer to "purloined" and I can't plausibly make that work. ALLANARBUS is another M*A*S*H actor, but that doesn't work at all. Can anyone come up with other/better ideas in this vein? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:31, 4 November 2013 (UTC)
::: Don't misspell Alda's name; misspell Poe's! —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 02:07, 5 November 2013 (UTC)

In crossword puzzles, a clue ending in -ed (like 'purloined') is most commonly a hint that the answer ends in 'ed'. Cross referencing that with the Pokemon clue, the solution for "he did the MASH" becomes a nine or ten letter answer ending in: -edl, -edel, -edle, -edt, or -edta (excluding -edr due to non-uniqueness), with ......edle looking the most "English-y" to me. My hunch would be something else Robert Altman or Alan Alda "did"... but nothing seems to end in 'edle.' --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 23:07, 4 November 2013 (UTC)
: There is no indication that this is a standard crossword. Most users don't respect crossword conventions when writing password hints. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
:: Aside from the title. And the text. And the fact these didn't come from users, but were just chosen for a puzzle designed by Randall, who would include just this sort of puzzler hint/in-joke in a comic about puzzles. It's moot, because no synonyms for 'stolen' make any sense with a couple other letters tacked on the end. But still, there've been worse hunches. --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 00:45, 5 November 2013 (UTC)

For all we know, his favourite Water-3 Pokémon could be Shell Smash Cloyster or Shell Smash Omastar - "OmastarSmash" as a password would fit in with "Monster mash". [[Special:Contributions/141.101.99.252|141.101.99.252]] 23:16, 4 November 2013 (UTC)
: I like that idea, although it leaves "Monster " (with a trailing space) as the answer to "Purloined", which makes no sense. But interesting idea. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 00:00, 5 November 2013 (UTC)

MonsterMash
MonsterM
TheWiscash {{unsigned|Jcupcake}}
: It's "Whiscash", and it's Water 2 (not 3) and "MonsterM" makes no sense as an answer for the hint "Purloined". But I like the idea of adding "The" in front of the pokemon answer; perhaps we're being too restrictive by looking only at pokemon with length > 8. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
::Yeah, sorry about the typo - last one would be TheWhiscash. MonsterM absolutely makes sense. http://www.hoax-slayer.com/monster-666.shtml The purloined letter here IS M [[User:Jcupcake|Jcupcake]] ([[User talk:Jcupcake|talk]]) 02:40, 5 November 2013 (UTC)

So somewhere above this someone pointed out that purloined could refer to a monster.com hack...in which case, could the first two passwords be "monster mash" and "monster"? That would allow for another previous suggestion of "OmastarSmash" Also, here's my IP Address and a remarkably not-random timestamp: [[Special:Contributions/108.162.219.195|108.162.219.195]] 01:31, 5 November 2013 (UTC)

It could also be that there are modifiers to the base. I always thought of Monster Mash as MonstaMash. This would line up closely with My Corphish written as "mycorphish" My favorite pokemon is my pikachu not just any pikachu, but mine, sort of logic. [[User:Bitassassin|Bitassassin]] ([[User talk:Bitassassin|talk]]) 01:43, 5 November 2013 (UTC)

Could "he did the mash" be referring to brewing and/or the Maillard reaction? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 05:32, 5 November 2013 (UTC)

I was just thinking that "MonsterM Ash", "MonsterM", both seem to make sense, and Ash had a few water pokemon in the water 3 egg group, so could it potentially be something along the lines of "Corphish Ash"? That was the only 8 letter water 3 pokemon he had and it fits with the other clues [[User:NewToThis|NewToThis]] ([[User talk:NewToThis|talk]]) 07:25, 5 November 2013 (UTC)

Has the idea of pokemon fusion been considered? http://pokemon.alexonsager.net/ referenced by http://kotaku.com/how-the-website-that-lets-you-create-frankenstein-pokem-510517336
--[[User:Oukansz|Oukansz]] ([[User talk:Oukansz|talk]]) 19:25, 5 November 2013 (UTC)

;Fanservice

Randall must know about this site. This comic doesn't work without people to crack the code. Should we have a fanservice category? :-) --[[User:SurturZ|SurturZ]] ([[User talk:SurturZ|talk]]) 23:32, 4 November 2013 (UTC)

I'm beginning to suspect that the wide boxes will have the key in it. Assuming he used regular DES (or DES3, for that matter, but using the same 8-byte key 3 times), it could be plausible. The 5 in the middle could be 'abcde', a lot of the other 'second halves' are numbers, and the likely known one that's not seems to be an 'x' -- which could certainly be involved in writing a hex number... problem is there's 11 of those boxes. Trying to guess what signficance the positioning of those boxes have. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:00, 5 November 2013 (UTC)

Actually, it looks like the boxes line up perfectly such that the wide bits (for second-half) will only touch the words they apply to. Order will be more or less what they are (I see the wide boxes as, in order, 1, 57, 10, Sheen, and X, with the 8 char boxes as Matthias, Password, Judith15, Charlie, and HoustonT). The next 5 are odd -- I'm not sure if we repeat the alpha/obvious password 5 times, or it's 5 chars long (abcde) and one per box. The last set is still under discussion, of course. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:20, 5 November 2013 (UTC)

;MASH capitalized
I'm currently chasing down the idea that MASH refers to [[Wikipedia:MASH-1]]. Haven't seen any name yet that looks like it might satisfy "Purloined". - [[User:BozoTheScary|BozoTheScary]] ([[User talk:BozoTheScary|talk]]) 01:56, 5 November 2013 (UTC)

I think MASH is a transcribing error. The comic doesn't have any difference on those letters as far as I can tell. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:18, 5 November 2013 (UTC)

The Purloined Letter is a Edgar Alan Poe story starring C. Auguste Dupin. Might help. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:08, 5 November 2013 (UTC)

There is also a strong association between the Monster Mash and the Mashed Potato, just throwing another idea into the ring. Also try the name BobbyPickett. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:22, 5 November 2013 (UTC)

Frankenstein did the Monster Mash in the cartoon for the song. That leads to a Pokemon card ending in 'tein' and 'frankens' for the hint Purloined. I could not find a Pokemon card that ended in 'tein' nor could I link 'frankens' with Purloined. I ran 'frankens' through Google Translate but found nothing. Also, it's the same password for the "monster mash" hint and the entry with no password hint so I think it's an obvious password (something someone can recall without a hint). Frankenstein fits that part but not the other ones. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:35, 5 November 2013 (UTC)

My $0.02: "He did the mash..." might allude to the expression "doing the math" only (intentionally) misspelled and something like "numbert" or "numb" could be the answer. --[[User:RagnarDa|RagnarDa]] ([[User talk:RagnarDa|talk]]) 04:01, 5 November 2013 (UTC)

graveyard smash fits for the first clue (though lyrically incorrect). Gives smash as second block, but cannot find association between graveyard and purloined. [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:08, 5 November 2013 (UTC)

If we take The Monster Mash for the first answer, it could be written as TheMonsterMash or The Monster Mash, giving either TheMonst erMash or The Mons ter Mash as the two blocks. This gives either Themonst or The Mons as Purloined and either ermash or ter Mash for second block of pokemon answer. Suggestions? [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:15, 5 November 2013 (UTC)
: Only problem is that the word "the" is the last word of the hint.[[Special:Contributions/108.162.237.117|108.162.237.117]] 04:51, 5 November 2013 (UTC)

I know that the water-3 group is not the same, but it seems like an odd coincidence that another pokemon group is the "monster" group. --[[User:Natnee|Natnee]] ([[User talk:Natnee|talk]]) 04:44, 5 November 2013 (UTC)

There is a Scooby Doo comic book story titled "[The Purloined Poe-M](http://scoobydoo.wikia.com/wiki/The_Purloined_Poe-M)", which has an odd similarity to the "MonsterM" possible password. This would leave the pokemon password ending "ash" who, of course, is a pokemon character ... which makes no sense in that place. [[Special:Contributions/199.27.128.83|199.27.128.83]] 05:51, 5 November 2013 (UTC)

Here's one that fits: 
facemash4077 (Combination of facemash by zuckerberg and M*A*S*H) 
facemash (Site made by Zuck in The Social network.) 

Maybe facmashklinger.. The eggklinger being a water-3 Pokemon? [[Special:Contributions/108.162.215.39|108.162.215.39]] 06:14, 5 November 2013 (UTC)rbnm

[http://en.wikipedia.org/wiki/John_Orchard John Orchard] played in M*A*S*H and also was in the movie "The Letter" [[Special:Contributions/108.162.250.8|108.162.250.8]] 05:02, 6 November 2013 (UTC)

;Working Backwards
I'm attempting to take a different tact, by trying to find the key itself. I'm assuming its something easy to guess. I've tried the top 100 Adobe passwords (you can get them [http://stricture-group.com/files/adobe-top100.txt here]) using the following bash script (testing the word "matthias", as this one seems pretty certain):

<code>
while read p; do echo -n $p\: && echo -n "matthias" | openssl enc -e -des-ede3 -nosalt -nopad -pass pass:$p | xxd -p; done < passwords.txt
</code>

For this to work, I pre-processed the top 100 passwords file with:

<code>
cat adobe-top100.txt | cut -c51- > passwords.txt
</code>

…and then trimmed the cruft with a text editor (leading text paragraph and table headers). So far no luck; perhaps someone with more time on their hands can try some obvious XKCD-related passwords (I've tried XKCD, xkcd, xkcd.com, randall, rmunroe, encryptic, and Encrytic) and see if the encrypted version(s) match up with what we have here. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:27, 5 November 2013 (UTC)
:I should mention that I've also tried OpenSSL's des-ede mode and des-ecb, as Im not sure if Randall used one, two, or three key mode. I'm also assuming the key has been generated from the password using OpenSSL's default key generation method, any of with I suppose could be incorrect. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:39, 5 November 2013 (UTC)
:: Nice work. Note that the puzzle is very specific about using "block mode 3-DES" (usually called "ECB"). DES keys are actually 56 bits; each of the 8 bytes has odd parity (the number of 1 bits is odd). From [https://en.wikipedia.org/wiki/Data_Encryption_Standard wp], "Bits 8, 16,..., 64 are for use in ensuring that each byte is of odd parity." As a wild guess, I'd suggest that, if Randall chose a readable 8-ASCII-character passphrase, he also selected only characters that would make the parity bit zero (so that the result was ASCII). That is, <code><nowiki>[ #%&)*,/12478;=>@CEFIJLOQRTWX[]^abdghkmnpsuvyz|]</nowiki></code>. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:34, 5 November 2013 (UTC)
::: Uh, hold one. Read the "Explanation" section above. It's clear that the hashes are not real, so brute-forcing the key isn't going to work. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:48, 5 November 2013 (UTC)
:::: Just to note, there are actually three options for keys in TripleDES: having three independent keys (K1, K2, K3), having two independent keys (K1, K2, K1), or using a single key (K1, K1, K1). When run in ECB mode, OpenSSL calls these '''des-ede3''' and '''des-ede''' for options 1 and 2 (option 3 is for backwards compatibility with DES, and can be run using just '''des-ecb'''). See [http://en.wikipedia.org/wiki/Triple_DES#Keying_options Triple DES - Keying Options] for details. In addition, the password and the key are two different entities -- typically the password is run through a keying algorithm first (commonly [http://en.wikipedia.org/wiki/PBKDF2 PBKDF2] for 3DES), so there is no need to select password characters based on parity patterns. All of which is moot now that we know that the data isn't in fact TripleDES encrypted in the first place. I'm actually disappointed in Randall now :P. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 19:01, 5 November 2013 (UTC)

I Hadn't seen it mentioned yet, but Monster Mash was written by Robert George Pickett (http://en.wikipedia.org/wiki/Bobby_Pickett), Whose last name goes closely with the second clue, Purloined, which means "stolen". I can't make it work, but I figured it was worth pointing out. (Nov 5th 1:26 pm utc ) [[Special:Contributions/173.245.56.24|173.245.56.24]] 13:27, 5 November 2013 (UTC)
: It's a good connection. Maybe we should reorganize the discussion and start a list of "interesting ideas we can't quite make work" in the hopes that someone else has an insight. Edgar Allan / Alan Alda, Pickett / "Pick it", Klinger / Kingler, etc. Most of these are just manifestation of the human brain's ability to find patterns even in random coincidence, of course, but one of them might be on the right track. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

Just quick thoughts.
I feel like Cpl klinger and the water type kingler is too solid a connection to ignore even though I can't really use it.
Kingler was owned in the series by Ash.
Ash is a three letter word and the last three letters of the phrase monstermash.
Monsterm=8 letters so the first block ash=3 letters in the second block.
Monsterm is about the monster.com thing, therefore purloined. It's a double reference, the .co has been purloined from the purloined website.
Then blastoise -3, or rather blastois3 - 3 (mocking the common password meme of replacing letters with numbers)
So the last password, which is super hard to guess and well chosen even with the clue is, blastoisash? It's a feasibly memorable password that would not be quickly forgotten by a pokemon fan while still being hard to guess.
Can you think of a way to check it? Maybe go into the old command line xkcd and try it as a password? (From a contributor to my talk page) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 13:52, 5 November 2013 (UTC)
: That's really a stretch. ".co is purloined from monster.com?" really? The answer will be far more obviously correct... once we figure it out. Look at the other answers, for example. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

;another quick idea for monster mash

It could be deflection. Maybe whoever put it in was paranoid. Or just dumb. Or who knows.

But, there is a pokemon that's in the monster/water(-1) hybrid group called Marshtomp.

Monster mash, mashed (ie anagrammed) can give us all but the P out of that... which is fine, as it's a 9-letter name.

Thus we have E, N and S left over (and indeed a further T, H, E), which could become overall, e.g, Marshtomens (...Marshtomethens? Or w/e), which you can split up as you like to represent something which has been stolen (personally). Possibly in german slang or something. It doesn't have to be a direct thesaurus link, it could well be complete misdirection (on Randall's behalf, or that of his notional Adobe user), same as for the pokemon.

And for the pokemon itself, it could well be "Marshtomp3" ;)

Also, don't forget about reversed words and so-on.

Heck, I've used very personal and/or random things (like, maybe two or three people in the world may recognise it in connection with me, and it's not online, at least not anywhere it can be found - basically it's just in my head and dies with me), reversed, with numbers substituting random characters, as passwords before. That covers each individual base in just one PW...

Now we just have to start feeding the guesses into a hash engine and try to figure out, maybe brute force, what the original key was. Knowing almost all of the other answers already makes this far, far easier for those who may have the facility to run the tests already. [[Special:Contributions/141.101.99.213|141.101.99.213]] 14:54, 5 November 2013 (UTC)
: This is not a real excerpt from the password file, this is a puzzle which Randall made up. Therefore, the answer to the last group will not be random, and it will not be a stretch. It will be obvious (as obvious as the previous ones)... once we figure out the catch. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

FWIW, Eve Online also features a "Purloined Sansha Codebreaker". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:16, 5 November 2013 (UTC)

I agree that the solution has to be obvious - especially after its revealed. If this were a crossword puzzle, then the clues like Purloined might be followed by a question mark. Purloined? a cat that is loined - a cat that is covered with cloths? Puss in boots? Or something along those lines... [[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

purloined=phished (Corphish)? {{unsigned ip|108.162.216.227}}

i wonder if the link between the last three clues is more like a cryptic crossword puzzle---for instance, --purloined= heisted; the other clues reading it as he/is/ted...?--[[User:Wwd|Wwd]] ([[User talk:Wwd|talk]]) 22:40, 5 November 2013 (UTC)

I wonder if the pokemon could be the name of an ubuntu release, per "Not Really Into Pokemon" at http://xkcd.com/178/ --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 22:45, 5 November 2013 (UTC)

You could also abbreviate Robert Pickett's name (the co-writer of Monster Mash) as "Rob Pickett" which goes even more with purloined (the first 8 letters are now "Rob Pick"). [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:21, 6 November 2013 (UTC)

Beings that "did the mash" according to the song http://www.lyricsondemand.com/onehitwonders/monstermashlyrics.html : my monster, the ghouls, Igor, Igor's baying hounds, the coffin-bangers, "The Crypt-Kicker Five", you. Zombies, Wolf Man, Dracula/Drac, and Boris were also mentioned, but they didn't do the mash. Hope that helps someone (doesn't help me). [[User:DPWally|DPWally]] ([[User talk:DPWally|talk]]) 23:05, 6 November 2013 (UTC)

;Capitalization hints?

I have no idea who first put the capital letters in "MASH" and "Purloined" in the transcript (and I don't want to check), but now that I've gotten rid of the second (after somebody else got rid of the first), I want to record them here for the record. Possibly Randall put them in and was feeding us clues (so ''MASH'' the book or movie, and ''Purloined'' a title such as Poe's). I consider this unlikely (after all, I removed one of these capitalizations), but the possibility should be recorded. —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 01:17, 6 November 2013 (UTC)

I can't be a coincidence that this comes up as the top google news search for 'purloined:' http://www.theregister.co.uk/2013/11/05/adobe_users_purloined_passwords_were_pathetic/ {{unsigned ip|108.162.246.120}}

"38a7c9279cadeb44 9dca1d79d4dec6d5 he did the mash, he did the": Ministermash (sounds like monster mash)
"38a7c9279cadeb44 purloined": Minister (based on the character Minister D-, who stole the letter in the Edgar Allen Poe story)
"a8ae5754a2b7af7a 9dca1d79d4dec6d5 fav water-3 pokemon": OmastarSmash (Shell Smash Omastar)
So,38a7c9279cadeb44 = minister, 9dca1d79d4dec6d5 = mash, a8ae5754a2b7af7a = omastars
04:07, 6 November 2013 (UTC)
:Probably one of the best complete theories I've heard [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:26, 6 November 2013 (UTC)

I suggest "alligato" (a form of Latin ''alligatus'', perfect passive participle of ''alligo'' "bind up"), and "alligator" (Referencing "Land of 1000 Dances"). [[Special:Contributions/199.27.128.62|199.27.128.62]] 05:37, 6 November 2013 (UTC)

I think there is a transcribe mistake. 
Instead of "fav water-3 pokemon" 
Could it be "fay water-3 pokemon" 
Look at the Y and V letters in the non-chopped letters above. I think it is a Y and not a V. 
{{unsigned ip|108.162.215.51}}
*About the Pokemon, is it possible everyone's ignoring a much simpler explanation? Every Pokemon game begins with a choice of one of the three starter Pokemon, each of which have an evolutionary line of three Pokemon. In first gen, if your "favorite [is] water [from the] 3 Pokemon", then you'll be using Squirtle, followed by Wartortle and Blastoise. 2nd gen: Totodile, Croconaw, Feraligatr. 3rd gen: Mudkip, Marshtomp, Swampert. 4th gen: Piplup, Prinplup, Empoleon. Perhaps the answer uses one of these, or some combination of them? --Anon 08:57, 6 November 2013 (UTC)

Boris Blacher wrote an opera based on 'The purloined letter' This may fit with Bobby 'Boris' Pickett who sang Monster Mash [[User:YellowYeti|YellowYeti]] ([[User talk:YellowYeti|talk]]) 11:11, 6 November 2013 (UTC)

The "Boris" in "Boris Pickett" is a reference to Boris Karloff. (In his other work, Pickett doesn't use that name.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 12:36, 6 November 2013 (UTC)

An alternative tack: how about Barbaracle for the Pokemon, BarbaraC(Jordan) for purloined and Barbara Clark - famous for doing Monster Mash-up novels. Does Barbara Jordan have some purloined link with watergate? {{unsigned ip|108.162.231.16}}
No, because the pokemon has a different starting string as the other two. --[[Special:Contributions/199.27.128.119|199.27.128.119]] 13:48, 6 November 2013 (UTC)

I think it is not coincidence that it is the last one that you can't solve. It may be an experiment by Randall to see if people can find a solution for a puzzle that doesn't make any sense. That said, if it does have a solution, it should not be "monstermash" since that is too close to the clue. If that was the password, everyone could guess it easily from the clue. It has to be one level "removed" from those words, guided by the clues for the matching passwords. The point of the post was that using unsalted crypt in the passwords allows you to combine clues, right? [[Special:Contributions/108.162.219.201|108.162.219.201]] 13:42, 6 November 2013 (UTC)

Not an answer, but maybe an approach: Look at it from the "what piece of information is Randall trying to tell us?" angle. In the first few puzzles, he teaches us the rules of the game. We disambiguate clues by later ones, which we can only do because of the missing salts. For example, the "name and jersey number" just tells us the format of the answer to the previous clue about Judith 15:10. Otherwise, there would have been no way to guess that exact string without the space and colon. Also, "Charlie X" and "Charlie Sheen" demonstrate that spaces are used in a "fair" way. I would not expect a trailing space on a password, for example. So what about the Pokemon then? The first half of the crypt for the Pokemon isn't used anywhere else. The easiest interpretation I can come up with is that this is just trying to restrict the common second part of the word to letters from the list of Water-3 Pokemon. Let's assume it wasn't made very difficult, so take just 'el', 'le', and 'l' from the Water-3-only group on bulbapedia. Then the puzzle is this:

something related to 'monster mash': 8 letters plus the ending 'el', 'le', or 'l'
something related to 'purloined' or related to 'letter': the same 8 letters, minus the ending
pokemon: completely unrelated, just chosen to have a well known list of 9 or 10 letter words to restrict search space for first line

I suck at crosswords, but can someone solve this restated version? There can't be that many 8 letter words that also make a word with 'el', 'le', or 'l' added to them? 15:23, 6 November 2013 (UTC) {{unsigned ip|108.162.219.201}}

: Not to insult your reasoning, which is entirely correct, but I believe your restatement is *exactly* the puzzle that (reasonable) people have been working on (and failing to solve) since Monday. As a long-time mystery hunter, I'd like to suggest the opposite: the continued failure to find some reasonable solution to the puzzle as stated above implies that *at least one* of the assumptions above is wrong. (For the record, I'd broaden your first to "...related to 'monster mash' or the show/film M*A*S*H", but again, that's the assumption we *have* been making.) So I'm especially interested in ideas *different* from the above, at this point, although not necessarily throwing out the bathtub, baby and all. Probably there's a fundamentally different way to read the first clue, or the second, or the third. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: Not insulted at all, just glad if I summarized it correctly, since I was late to the party. Maybe this helps others bootstrap. As requested, a slightly alternate view for clue 1: the word "mash" may not be part of the answer, since it appears in the clue. This means the direct answer to the clue is "monster" and has nothing to do with the song at all. The password could just be the name of a monster that is formed from something purloined plus an short ending. The endings we're already considering make nice monster names.[[Special:Contributions/108.162.219.198|108.162.219.198]] 19:54, 6 November 2013 (UTC)

:::I appreciate the summary, it helped me come up with my "keyboard mash" proposed solution, which you can see below" [[Special:Contributions/108.162.221.16|108.162.221.16]] 21:51, 6 November 2013 (UTC)

Looking at some word lists at http://www.litscape.com/words/ending_with/l/9_letter_l_end_words.html , this doesn't seem to be leading anywhere good. Can someone fix my logic? [[Special:Contributions/108.162.219.201|108.162.219.201]] 15:33, 6 November 2013 (UTC)

Not sure if anyone else has pointed out yet, but there is a pokemon named purrloin http://bulbapedia.bulbagarden.net/wiki/Purrloin_%28Pok%C3%A9mon%29 . That seems like far too much of a coincidence to not be related. [[Special:Contributions/173.245.52.211|173.245.52.211]] 16:17, 6 November 2013 (UTC)
: We'll add it to the long list of suspicious coincidences. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: I don't believe the hints can be related. Note that the Pokemon's name shares zero characters with the answer to the 'purloined' clue, so they are not linked via the same password. Any semantic link is inconsistent with these being password hints from separate (imaginary) users. Maybe Randall subconsciously (or via google) went from purloined to Purrloin to names of Pokemon. [[Special:Contributions/108.162.219.198|108.162.219.198]] 19:20, 6 November 2013 (UTC)

a stretch.. but maybe a starting point?
bootlegd purloined
bootlegd ash he did the..
???whisc ash fav-3
[[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

;Hash collision

Maybe the last clues could be intended to be a hash collision? With 64-bit blocks that seems unlikely, but maybe it's a trick?
[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:29, 6 November 2013 (UTC)
:Finding the probability of a collision amounts to the birthday problem. Assuming the hash function gives all 2^64 hash values with equal probability and there are 153 million unique message blocks (probably right within an order of magnitude), we have:
:
: <pre>Pr[collision] = 1 - exp(-153000000^2/(2*2^64)) = 0.000634</pre>
:
: So the probability of a hash collision from different passwords is still quite low, even with such a large number of passwords. So it's worth assuming that all the identical hash blocks are from the same message, and keep looking for the poke-mash password.
: BTW, getting a 50% chance of a collision requires about <tt>sqrt(-2^65*ln(.5))</tt> = 5 billion unique passwords.
:[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:46, 6 November 2013 (UTC)

'''Explanation for the last 3:'''

He did the mash, he did the "keyboard mash"
ASDFGHJK - L

purloined "one letter from the home row"
ASDFGHJK

Then the third one is TENTACOO - L
[[Special:Contributions/108.162.221.16|108.162.221.16]] 21:45, 6 November 2013 (UTC)
:Purloined seems like a stretch. On the other hand, 'asdfghjkl' is the 56th most common password in the real adobe data, so perhaps you're on to something. [[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 22:08, 6 November 2013 (UTC)
::I don't know, I feel like purloined has got to be a reference to the Poe story. The pun that letter means single character rather than item of correspondence is cute and funny. [[Special:Contributions/108.162.221.16|108.162.221.16]] 22:30, 6 November 2013 (UTC)
:I like this explanation --[[User:Lackadaisical|Lackadaisical]] ([[User talk:Lackadaisical|talk]]) 22:28, 6 November 2013 (UTC)

Why the restriction on the ending of the Pokemon to el, l, etc? There could be an adjective before (i.e. redkingle), so the Pokemon name could extend more into the second frame. The adjective might be some abreviated synonym for favorite, or whatever fav (or fay) stand for. [[Special:Contributions/108.162.215.34|108.162.215.34]] 22:07, 6 November 2013 (UTC)rbnm

== The last clue ==

Regarding it being actually Fay water-3 pokemon, have a look at this: http://www.serebii.net/e-reader/battle/08.shtml

The trainer is named Fay, and has a Starmie, which is a Water-3 Pokemon according to http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group)

However, its only 7 characters. Not sure if it means anything, but just putting it out there.

EDIT: FayStarmie takes us to 10, leaving 9dca1d79d4dec6d5 meaning 'ie'

Talk:1286: Encryptic

2013-11-06T23:33:02Z

Haelbarde: /* The last clue */ new section

The answer to the weathervane sword/ favorite apostle hint has got to be Matthias. It is 8 characters long, Matthias was the apostle chosen to replace Judas and in the Redwall series Matthias is one of the wielders of the Sword of Martin a sword that was hung on a weathervane.

It is unclear to me if these are actual hashes from Adobe file? That would be very cool... but actual file seems to have passwords in slightly different format. http://arstechnica.com/security/2013/11/how-an-epic-blunder-by-adobe-could-strengthen-hand-of-password-crackers/ [[Special:Contributions/108.162.229.211|108.162.229.211]] 09:05, 4 November 2013 (UTC) pavel

:I wouldn't call 3DES secure ... but yes, in this situation the real problem is not using per-user salt. Note that I would expect that at least some of those examples would be solvable ...any idea? Hmmm ... sword of weather vane and one of apostles might be Martin ([http://redwall.wikia.com/wiki/Sword_of_Martin]) ... -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:00, 4 November 2013 (UTC)

::It's Jonathon (for John). Not sure what it has to do with weather vane swords though... [[Special:Contributions/108.162.240.18|108.162.240.18]] 12:42, 4 November 2013 (UTC)

:Umm. "Peter" does not seem to have 8 characters, does it? Encryption method suggests it should be 8 characters, as do 8 character boxes on the right... [[Special:Contributions/108.162.229.211|108.162.229.211]] 10:43, 4 November 2013 (UTC) pavel

::I'd say "weather vane sword", "name1" and "favorite of 12 apostles" is (Saint) Peter. "Weather vane" as symbol for the rooster in the denial, and the sword Peter used when Jesus was arrested. --[[Special:Contributions/108.162.254.177|108.162.254.177]] 10:25, 4 November 2013 (UTC)

::: ... interesting that google search didn't mentioned it :-) Seems bible have too low pagerank. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 10:32, 4 November 2013 (UTC)

::: The 'favourite' apostle was John the Evangelist though. http://en.wikipedia.org/wiki/Disciple_whom_Jesus_loved . The other biblical clue here is 'with your own hand you have done all this' - Judith 15:10. If that's Judith1510 then the 'name and shirt number' is 'Judith15'. The TOS/earlobes clue seems to be "Spock's brain" and "Spock's (ears?)". And the Michael Jackson one is (obviously) ABC123. [[Special:Contributions/141.101.99.214|141.101.99.214]] 11:14, 4 November 2013 (UTC)
:::: Perhaps "favorite" in this case refer's to the user's favorite, not Jesus's. [[User:Yomikoma|Yomikoma]] ([[User talk:Yomikoma|talk]]) 16:13, 4 November 2013 (UTC)
:::: The Michael Jackson password should just be "ABC". (The other clue refers only to letters, and the proper song title also has only letters.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:57, 4 November 2013 (UTC)
::: Given that name1 is two blocks long, I would guess that the apostle's name is going to be eight characters long, with the second hash block being 1+seven spaces (or nulls if Adobe pads it with nulls and not spaces). But then again, as the only disciple with a name eight letters long is Thaddeus maybe not {{unsigned ip|141.101.99.214}}

:::: "St.Peter" is 8 characters, and having a "special" character (the period) makes it a good choice for passwords that might require 1 non-alphanumeric character (and ban spaces). [[Special:Contributions/141.101.99.223|141.101.99.223]] 11:47, 4 November 2013 (UTC)

:::: I think it is obvious that Name1 refers to {The user's name} + 1. I wonder though if we should be referring to one of the other 12 apostles in a different context? https://en.wikipedia.org/wiki/Twelve_Apostles_%28disambiguation%29 - [[Special:Contributions/108.162.242.11|108.162.242.11]] 18:02, 4 November 2013 (UTC)
::::: Is the "weathervane sword" referring to Redwall? I haven't read the book myself, but would it be referring to the "Sword of Martin"? [http://redwall.wikia.com/wiki/Sword_of_Martin] --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:17, 4 November 2013 (UTC)

Another article about using passwords hints from multiple users to find the passwords from the breach. http://7habitsofhighlyeffectivehackers.blogspot.com/2013/11/can-someone-be-targeted-using-adobe.html [[User:Bugefun|Bugefun]] ([[User talk:Bugefun|talk]]) 11:06, 4 November 2013 (UTC)

"Sexy earlobes" makes me think of [http://misswiu.livejournal.com/5385.html "The ABC of Aerobics"], but that would make that Shirley Clarke, and nothing in Star Trek has anything to do with Shirley that I am aware of, except possible [http://en.memory-alpha.org/wiki/Ruth Shirley Bonne as Ruth]. I skimmed a list of episode titles, but nothing jumps out at me as particularly earlobish. [[Special:Contributions/108.162.219.187|108.162.219.187]] 11:20, 4 November 2013 (UTC)

:Sexy earlobes might have something to do with Ferengi, but they didn't appeared in TOS. 141.101.99.214's idea is better. -- [[User:Hkmaly|Hkmaly]] ([[User talk:Hkmaly|talk]]) 11:42, 4 November 2013 (UTC)

:OK, we know that "sexy earlobes" and "best TOS Episode" are the same for the first eight character, but differ after that, while "best TOS" and "sugarland" are the same after the first 8 characters. So, my guesses are : Best TOS episode: "Charlie X"; "Sexy Earlobes": Someone with the first name of "Charlie"; "Sugarland": some city in Texas (perhaps "HoustonTX") [[User:JamesCurran|JamesCurran]] ([[User talk:JamesCurran|talk]]) 16:51, 4 November 2013 (UTC)

Note that you should not ever use cipher in {{w|Block_cipher_mode_of_operation#Electronic_codebook_.28ECB.29|ECB (electronic codebook)}} mode, i.e. encrypt each block separately and independently, but use chaining. --[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 12:15, 4 November 2013 (UTC)
: And for passwords you shouldn't be using a cipher at all, but rather a hash function. (Or a cipher in one of the approved hash constructions, if you must.) And really you shouldn't be using a standard hash function, but be following best practices for passwords instead: salting the hash, using a *slow* hash function, etc. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)

Hmm, i'm rather confused about the last few on the list though. Assumedly the password for "he did the mash, he did the" would be "monster mash", but that would leave "purloined" with a password of either "monsterm" or "monster ". which doesn't make much sense. [[Special:Contributions/108.162.240.18|108.162.240.18]] 13:47, 4 November 2013 (UTC)

(charlie sheen) a1f9b2b6299e7a2b eadec1e6ab797397 sexy earlobes - He did a 2 and a half men episode on sexy earlobes
:(charlie x) a1f9b2b6299e7a2b 617ab0277727ad85 best tos episode - Star Trek has so many good episodes...
::(houstontx) 39738b7adb0b8af7 617ab0277727ad85 sugarland - Sugarland is in Houston, TX

I don't know about anyone else, but the "hints" column incidentally reminded me of {{w|Darwinian poetry|Darwinian Poetry}}... Not intentionally, I'm sure. [[Special:Contributions/141.101.98.214|141.101.98.214]] 14:46, 4 November 2013 (UTC)

Somehow I've missed out on this issue until this comic alerted me to it, but: once a few passwords are correctly guessed, does that make it straightforward to recover the encryption key, and then be able to decrypt '''all''' of them? —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 14:50, 4 November 2013 (UTC)

: Answering my own question: not really straightforward, no. 3DES is still pretty strong, and what knowing a few passwords gives you is a known-plaintext attack, which helps a little, but is by no means a giveaway. —[[User:Scs|scs]] ([[User talk:Scs|talk]]) 15:00, 4 November 2013 (UTC)

:: Note that if blackhat used this service, he would know at least one plaintext - his own password--[[User:JakubNarebski|JakubNarebski]] ([[User talk:JakubNarebski|talk]]) 15:05, 4 November 2013 (UTC)

:No, for calculating the encryption key of Triple DES, there is no real benefit in knowing million passwords, you would still need to brute force it. You would need to know at least 232 different passwords to make it easier but you can't do that with the leaked file (there are about 30 times less of them and moreover many of them are not unique). [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 16:08, 4 November 2013 (UTC)

Okay, so the first column is the encrypted password, the second one is the hint chosen by user. What do rectangles mean? [[Special:Contributions/173.245.53.151|173.245.53.151]] 15:28, 4 November 2013 (UTC)
:That are the fields to fill the characters in just as you do in a crossword puzzle. There are small fields at the beginning that take one character each and one large field at the end that takes one to eight characters. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 15:32, 4 November 2013 (UTC)

Water 3 is an egg group: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) . Given the length of the key, it will probably be 9-16 characters. (Crawdaunt, tentacool, and tentacruel are most likely) [[Special:Contributions/199.27.128.139|199.27.128.139]] 15:43, 4 November 2013 (UTC)
:-- which means 9dca1d79d4dec6d5 is either L, EL, or T, but I can't find a way for that to match up with any variation of "monster mash." [[Special:Contributions/173.245.55.209|173.245.55.209]] 16:15, 4 November 2013 (UTC)
:: Same problem here... Monster mash must not be correct, but it is one of the easier ones, I can't give up on it. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:35, 4 November 2013 (UTC)
::: Maybe, he did the MASH is about the book, movie or TV Show M*A*S*H instead? --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:49, 4 November 2013 (UTC)
:: Monster Mash was written by Bobby Pickett, maybe it has something to do with him? [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:38, 4 November 2013 (UTC)
::: Maybe it's not "monster mash" but just "monster". This would allow the Water-3 Pokemon to be "Cloyster". [[Special:Contributions/108.162.237.5|108.162.237.5]] 19:17, 4 November 2013 (UTC)
:::: You are having trouble counting to eight. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 20:22, 4 November 2013 (UTC)
::::: You are forgetting the space. Assuming space is stored as a null character, this might actually work.[[Special:Contributions/173.245.54.29|173.245.54.29]] 01:43, 5 November 2013 (UTC)
:::::: Nobody in their right mind would encode spaces as nulls. For us to suppose that they did, we'd need to have some specific clue to that effect. [[Special:Contributions/108.162.238.5|108.162.238.5]] 09:08, 5 November 2013 (UTC)

It seems to me there are two puzzles here, if folks are right that this is not actual data from the hack. 1) Figure out Adobe's master 3DES encryption password, for the big prize. 2) figure out Randall's 3DES encryption password for this puzzle based on these hints, and knowing it will be something clever. [[User:Nealmcb|Nealmcb]] ([[User talk:Nealmcb|talk]]) 16:12, 4 November 2013 (UTC)

Trying to decode the passwords (As Randall obviously wants us to)
"with your own hand you have done all this" is from the book of Judith.
Working on decoding the others. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 17:13, 4 November 2013 (UTC)

8babb6299e06eb6d = password
a0a2876eb1ea1fea = 1
85e9da81a8a78adc = 57
--[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 18:10, 4 November 2013 (UTC)

Weather Vane Sword may be a reference to Game of Thrones Ascent. The "Sworn Sword", I believe is "Rona" which is also a name. [[Special:Contributions/173.245.55.216|173.245.55.216]] 18:27, 4 November 2013 (UTC)
: It needs to be a name of an apostle (as per line 7) and have 7 or 8 characters (as line 3 needs a continuation) so this leaves Matthew, Thaddeus and (Judas) Iscariot. [[User:Sten|'''STEN''']] ([[User talk:Sten|talk]]) 18:57, 4 November 2013 (UTC)

If a password(or 8 character segment) is guessed can it be confirmed? Somebody should take this leaked list and create a website that presents it like in the comment and lets people guess. It can fill in the guessed ones. [[Special:Contributions/108.162.246.117|108.162.246.117]] 19:17, 4 November 2013 (UTC)

I'm putting in Mattias for the sword, name1 and disciple because of Saint Matthias [http://en.wikipedia.org/wiki/Saint_Matthias] and Redwall Matthias [http://redwall.wikia.com/wiki/Matthias] who held the Weathervane Sword (Also known as the sword of Martin [http://redwall.wikia.com/wiki/The_Sword_of_Martin] ) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)
: I've also removed "monster mash" from the list as it can't be right. Doesn't match the pokemon or the purloined clues. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 19:27, 4 November 2013 (UTC)

Based on the Water-3 Pokemon hint, the only possibilities of more than 8 characters are tentacool, tentacruel, barbaracle, crawdaunt, carracosta, clauncher, and clawitzer. This would mean "9dca1d79d4dec6d5" would be l, el, le, t, ta, or r. --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 19:51, 4 November 2013 (UTC)
: This is assuming there are no characters before the actual name of the pokemon. [[Special:Contributions/173.245.55.209|173.245.55.209]] 20:30, 4 November 2013 (UTC)
: Assuming Randall has constructed this comic to have a unique answer, it can't end in r because then the clue would be ambiguous (could be clauncher or clawitzer). [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Some of these can be ruled out; it's very unlikely to be a Generation VI Pokémon (Barbaracle, Clauncher and Clawitzer) as this has only just come out and someone would have had to set up their pasword within the last few weeks. And the Pokémon that are also in the Water-1 group are probably more likely to be thought of as Water-1 than Water-3 (Crawdaunt and Carracosta). This only leaves Tentacool and Tentacruel as longer than 8 letter Water-3 only Pokémon that have been known of for a reasonable length of time; and Tentacool is no one's favourite, as the annoying multitude of them that show up whenever you try to Surf anyway makes them as reviled as Zubats in caves, if not moreso. :P Of course, the password need not be simply the Pokémon's name alone. "SexyShellder" "Cloyster1987" "Misty'sStarmie"... Who knows? [[Special:Contributions/141.101.99.252|141.101.99.252]] 01:03, 5 November 2013 (UTC)

I don't know the answer to the end either, but here's a list of people who did the Monster Mash, from Wikipedia:
* Bobby Picket (as Boris Picket)
* Garpax Records (Gary S. Paxton)
* The Misfits
* far, far too many other covers to list
And here's some synonyms for "purloined", from thesaurus.com:
* stole
* pilfered
* filched
* misappropriated
* embezzled
* burglarized
* shoplifted
* poached
* pillaged
* cheated
* pinched
* heisted
* thieved
* plundered
* appropriated
* lifted
* took
* snitched
* defrauded
* swindled
* ripped off
* made off with
Good luck with these!
—[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 20:31, 4 November 2013 (UTC)

What about Purloined referring to "The Purloined Letter?" When choosing hints, people, at least in my experience, tend to use word association rather than synonyms. [[Special:Contributions/173.245.55.209|173.245.55.209]]

Purloined could also be a reference to the Monster.com hack (http://www.symantec.com/connect/blogs/monster-trojan). [[Special:Contributions/108.162.237.11|108.162.237.11]] 21:00, 4 November 2013 (UTC)

Words meaning purloined that can have the listed suffixes could be '''embezzle'''/'''embezzler''' or '''scrounge'''/'''scrounger'''. Not sure if it fits to the mash clue. There was a loan shark character who would acquire things on MASH called Rizzo, it is a stretch though. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:01, 4 November 2013 (UTC)

I'm still trying to figure out how the solutions go into the spaces on the right -- it may be more obvious once the last couple clues are figured out. I suspect the ordering and numbers of clues have some sort of meaning. Why are there 5 of the 877... passwords, 2 with no clues? Why is one of the 4e18.... passwords separated from the rest? [[Special:Contributions/108.162.221.28|108.162.221.28]] 21:07, 4 November 2013 (UTC)

Could Purloined be a reference to the "Purloined Shadows" book in Elder Scrolls? --[[User:Dvorakmd|Dvorakmd]] ([[User talk:Dvorakmd|talk]]) 21:09, 4 November 2013 (UTC)
: Or 'The Purloined Payroll', a WoW quest? "Purloined in Petrograd" is also a lyric to a Decemberists song (The Bagman's Gambit). Google n-grams suggests that "Purloined Image", and "purloined documents" are a Thing. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:58, 4 November 2013 (UTC)

Purloined could be a reference to something that is known as have been stolen like a work of art, or it could be something that was stolen in an XKCD comic. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:18, 4 November 2013 (UTC)

'''EdgarPoe'''(author of The Purloined Letter)/'''EdgarPoet''' fits, but again not really anything to do with MASH. [[Special:Contributions/108.162.246.117|108.162.246.117]] 21:27, 4 November 2013 (UTC)

Water-3 pokemon (egg group) are given here: http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group) ...if I split off the letters of their names after the 8th letter, we see l, el, le, t, ta, and r. So the MASH item ends with one of those suffixes. [[Special:Contributions/199.27.128.167|199.27.128.167]] 21:31, 4 November 2013 (UTC)
: Can't end in 'r', because then that clue would be ambiguous. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 21:53, 4 November 2013 (UTC)
: Speaking of pokemon, could the clue to purloined have something to do with the pokemon Purrloin? http://bulbapedia.bulbagarden.net/wiki/Purrloin_(Pok%C3%A9mon) [[Special:Contributions/108.162.221.43|108.162.221.43]] 23:51, 4 November 2013 (UTC)

Is there a reason "MASH" is capitalized in the above sections? Given the context, it shouldn't be, and I still haven't given up on the password being a reference to the monster mash. That said, we can't ignore the movie/show MASH.
Also, now that I think about it: pokeMONstermash? I don't know, just throwing ideas out :P [[Special:Contributions/173.245.55.209|173.245.55.209]] 22:08, 4 November 2013 (UTC)

On [http://de.reddit.com/r/programming/comments/1pvwyf/xkcd_encryptic_analysis_at_the_link_below/ reddit] they suggest "Letterman" (which is wrong, too many letters) based on the M*A*S*H episode, "Letters". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:11, 4 November 2013 (UTC)
:...on the other hand, I wonder if an answer like "ALANALDA" would work? As in, someone who "did the M*A*S*H"... [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:13, 4 November 2013 (UTC)
:: Sadly, no. Because it needs to be more than 8 characters. --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 22:17, 4 November 2013 (UTC)
::: No, I mean, "an answer of this form", not ALANALDA exactly. The Edgar Allan / Alan Alda congruence is tasty, but I can't make it work. ALLANPOE works as an answer for "Purloined" but that makes something like ALLANPOET the answer to "he did the MASH" (CRAWDAUNT is then the pokemon). But that's misspelling Alda's name for the MASH clue, doesn't quite work. There's also JAMIEFARR (Cpl Klinger) as a better answer to "he did the MASH" but then that makes JAMIEFAR the answer to "purloined" and I can't plausibly make that work. ALLANARBUS is another M*A*S*H actor, but that doesn't work at all. Can anyone come up with other/better ideas in this vein? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 22:31, 4 November 2013 (UTC)
::: Don't misspell Alda's name; misspell Poe's! —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 02:07, 5 November 2013 (UTC)

In crossword puzzles, a clue ending in -ed (like 'purloined') is most commonly a hint that the answer ends in 'ed'. Cross referencing that with the Pokemon clue, the solution for "he did the MASH" becomes a nine or ten letter answer ending in: -edl, -edel, -edle, -edt, or -edta (excluding -edr due to non-uniqueness), with ......edle looking the most "English-y" to me. My hunch would be something else Robert Altman or Alan Alda "did"... but nothing seems to end in 'edle.' --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 23:07, 4 November 2013 (UTC)
: There is no indication that this is a standard crossword. Most users don't respect crossword conventions when writing password hints. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
:: Aside from the title. And the text. And the fact these didn't come from users, but were just chosen for a puzzle designed by Randall, who would include just this sort of puzzler hint/in-joke in a comic about puzzles. It's moot, because no synonyms for 'stolen' make any sense with a couple other letters tacked on the end. But still, there've been worse hunches. --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 00:45, 5 November 2013 (UTC)

For all we know, his favourite Water-3 Pokémon could be Shell Smash Cloyster or Shell Smash Omastar - "OmastarSmash" as a password would fit in with "Monster mash". [[Special:Contributions/141.101.99.252|141.101.99.252]] 23:16, 4 November 2013 (UTC)
: I like that idea, although it leaves "Monster " (with a trailing space) as the answer to "Purloined", which makes no sense. But interesting idea. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 00:00, 5 November 2013 (UTC)

MonsterMash
MonsterM
TheWiscash {{unsigned|Jcupcake}}
: It's "Whiscash", and it's Water 2 (not 3) and "MonsterM" makes no sense as an answer for the hint "Purloined". But I like the idea of adding "The" in front of the pokemon answer; perhaps we're being too restrictive by looking only at pokemon with length > 8. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 23:59, 4 November 2013 (UTC)
::Yeah, sorry about the typo - last one would be TheWhiscash. MonsterM absolutely makes sense. http://www.hoax-slayer.com/monster-666.shtml The purloined letter here IS M [[User:Jcupcake|Jcupcake]] ([[User talk:Jcupcake|talk]]) 02:40, 5 November 2013 (UTC)

So somewhere above this someone pointed out that purloined could refer to a monster.com hack...in which case, could the first two passwords be "monster mash" and "monster"? That would allow for another previous suggestion of "OmastarSmash" Also, here's my IP Address and a remarkably not-random timestamp: [[Special:Contributions/108.162.219.195|108.162.219.195]] 01:31, 5 November 2013 (UTC)

It could also be that there are modifiers to the base. I always thought of Monster Mash as MonstaMash. This would line up closely with My Corphish written as "mycorphish" My favorite pokemon is my pikachu not just any pikachu, but mine, sort of logic. [[User:Bitassassin|Bitassassin]] ([[User talk:Bitassassin|talk]]) 01:43, 5 November 2013 (UTC)

Could "he did the mash" be referring to brewing and/or the Maillard reaction? [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 05:32, 5 November 2013 (UTC)

I was just thinking that "MonsterM Ash", "MonsterM", both seem to make sense, and Ash had a few water pokemon in the water 3 egg group, so could it potentially be something along the lines of "Corphish Ash"? That was the only 8 letter water 3 pokemon he had and it fits with the other clues [[User:NewToThis|NewToThis]] ([[User talk:NewToThis|talk]]) 07:25, 5 November 2013 (UTC)

Has the idea of pokemon fusion been considered? http://pokemon.alexonsager.net/ referenced by http://kotaku.com/how-the-website-that-lets-you-create-frankenstein-pokem-510517336
--[[User:Oukansz|Oukansz]] ([[User talk:Oukansz|talk]]) 19:25, 5 November 2013 (UTC)

;Fanservice

Randall must know about this site. This comic doesn't work without people to crack the code. Should we have a fanservice category? :-) --[[User:SurturZ|SurturZ]] ([[User talk:SurturZ|talk]]) 23:32, 4 November 2013 (UTC)

I'm beginning to suspect that the wide boxes will have the key in it. Assuming he used regular DES (or DES3, for that matter, but using the same 8-byte key 3 times), it could be plausible. The 5 in the middle could be 'abcde', a lot of the other 'second halves' are numbers, and the likely known one that's not seems to be an 'x' -- which could certainly be involved in writing a hex number... problem is there's 11 of those boxes. Trying to guess what signficance the positioning of those boxes have. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:00, 5 November 2013 (UTC)

Actually, it looks like the boxes line up perfectly such that the wide bits (for second-half) will only touch the words they apply to. Order will be more or less what they are (I see the wide boxes as, in order, 1, 57, 10, Sheen, and X, with the 8 char boxes as Matthias, Password, Judith15, Charlie, and HoustonT). The next 5 are odd -- I'm not sure if we repeat the alpha/obvious password 5 times, or it's 5 chars long (abcde) and one per box. The last set is still under discussion, of course. [[Special:Contributions/108.162.221.28|108.162.221.28]] 00:20, 5 November 2013 (UTC)

;MASH capitalized
I'm currently chasing down the idea that MASH refers to [[Wikipedia:MASH-1]]. Haven't seen any name yet that looks like it might satisfy "Purloined". - [[User:BozoTheScary|BozoTheScary]] ([[User talk:BozoTheScary|talk]]) 01:56, 5 November 2013 (UTC)

I think MASH is a transcribing error. The comic doesn't have any difference on those letters as far as I can tell. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:18, 5 November 2013 (UTC)

The Purloined Letter is a Edgar Alan Poe story starring C. Auguste Dupin. Might help. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:08, 5 November 2013 (UTC)

There is also a strong association between the Monster Mash and the Mashed Potato, just throwing another idea into the ring. Also try the name BobbyPickett. [[Special:Contributions/108.162.249.5|108.162.249.5]] 03:22, 5 November 2013 (UTC)

Frankenstein did the Monster Mash in the cartoon for the song. That leads to a Pokemon card ending in 'tein' and 'frankens' for the hint Purloined. I could not find a Pokemon card that ended in 'tein' nor could I link 'frankens' with Purloined. I ran 'frankens' through Google Translate but found nothing. Also, it's the same password for the "monster mash" hint and the entry with no password hint so I think it's an obvious password (something someone can recall without a hint). Frankenstein fits that part but not the other ones. [[Special:Contributions/173.245.50.222|173.245.50.222]] 03:35, 5 November 2013 (UTC)

My $0.02: "He did the mash..." might allude to the expression "doing the math" only (intentionally) misspelled and something like "numbert" or "numb" could be the answer. --[[User:RagnarDa|RagnarDa]] ([[User talk:RagnarDa|talk]]) 04:01, 5 November 2013 (UTC)

graveyard smash fits for the first clue (though lyrically incorrect). Gives smash as second block, but cannot find association between graveyard and purloined. [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:08, 5 November 2013 (UTC)

If we take The Monster Mash for the first answer, it could be written as TheMonsterMash or The Monster Mash, giving either TheMonst erMash or The Mons ter Mash as the two blocks. This gives either Themonst or The Mons as Purloined and either ermash or ter Mash for second block of pokemon answer. Suggestions? [[Special:Contributions/108.162.249.5|108.162.249.5]] 04:15, 5 November 2013 (UTC)
: Only problem is that the word "the" is the last word of the hint.[[Special:Contributions/108.162.237.117|108.162.237.117]] 04:51, 5 November 2013 (UTC)

I know that the water-3 group is not the same, but it seems like an odd coincidence that another pokemon group is the "monster" group. --[[User:Natnee|Natnee]] ([[User talk:Natnee|talk]]) 04:44, 5 November 2013 (UTC)

There is a Scooby Doo comic book story titled "[The Purloined Poe-M](http://scoobydoo.wikia.com/wiki/The_Purloined_Poe-M)", which has an odd similarity to the "MonsterM" possible password. This would leave the pokemon password ending "ash" who, of course, is a pokemon character ... which makes no sense in that place. [[Special:Contributions/199.27.128.83|199.27.128.83]] 05:51, 5 November 2013 (UTC)

Here's one that fits: 
facemash4077 (Combination of facemash by zuckerberg and M*A*S*H) 
facemash (Site made by Zuck in The Social network.) 

Maybe facmashklinger.. The eggklinger being a water-3 Pokemon? [[Special:Contributions/108.162.215.39|108.162.215.39]] 06:14, 5 November 2013 (UTC)rbnm

[http://en.wikipedia.org/wiki/John_Orchard John Orchard] played in M*A*S*H and also was in the movie "The Letter" [[Special:Contributions/108.162.250.8|108.162.250.8]] 05:02, 6 November 2013 (UTC)

;Working Backwards
I'm attempting to take a different tact, by trying to find the key itself. I'm assuming its something easy to guess. I've tried the top 100 Adobe passwords (you can get them [http://stricture-group.com/files/adobe-top100.txt here]) using the following bash script (testing the word "matthias", as this one seems pretty certain):

<code>
while read p; do echo -n $p\: && echo -n "matthias" | openssl enc -e -des-ede3 -nosalt -nopad -pass pass:$p | xxd -p; done < passwords.txt
</code>

For this to work, I pre-processed the top 100 passwords file with:

<code>
cat adobe-top100.txt | cut -c51- > passwords.txt
</code>

…and then trimmed the cruft with a text editor (leading text paragraph and table headers). So far no luck; perhaps someone with more time on their hands can try some obvious XKCD-related passwords (I've tried XKCD, xkcd, xkcd.com, randall, rmunroe, encryptic, and Encrytic) and see if the encrypted version(s) match up with what we have here. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:27, 5 November 2013 (UTC)
:I should mention that I've also tried OpenSSL's des-ede mode and des-ecb, as Im not sure if Randall used one, two, or three key mode. I'm also assuming the key has been generated from the password using OpenSSL's default key generation method, any of with I suppose could be incorrect. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 09:39, 5 November 2013 (UTC)
:: Nice work. Note that the puzzle is very specific about using "block mode 3-DES" (usually called "ECB"). DES keys are actually 56 bits; each of the 8 bytes has odd parity (the number of 1 bits is odd). From [https://en.wikipedia.org/wiki/Data_Encryption_Standard wp], "Bits 8, 16,..., 64 are for use in ensuring that each byte is of odd parity." As a wild guess, I'd suggest that, if Randall chose a readable 8-ASCII-character passphrase, he also selected only characters that would make the parity bit zero (so that the result was ASCII). That is, <code><nowiki>[ #%&)*,/12478;=>@CEFIJLOQRTWX[]^abdghkmnpsuvyz|]</nowiki></code>. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:34, 5 November 2013 (UTC)
::: Uh, hold one. Read the "Explanation" section above. It's clear that the hashes are not real, so brute-forcing the key isn't going to work. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:48, 5 November 2013 (UTC)
:::: Just to note, there are actually three options for keys in TripleDES: having three independent keys (K1, K2, K3), having two independent keys (K1, K2, K1), or using a single key (K1, K1, K1). When run in ECB mode, OpenSSL calls these '''des-ede3''' and '''des-ede''' for options 1 and 2 (option 3 is for backwards compatibility with DES, and can be run using just '''des-ecb'''). See [http://en.wikipedia.org/wiki/Triple_DES#Keying_options Triple DES - Keying Options] for details. In addition, the password and the key are two different entities -- typically the password is run through a keying algorithm first (commonly [http://en.wikipedia.org/wiki/PBKDF2 PBKDF2] for 3DES), so there is no need to select password characters based on parity patterns. All of which is moot now that we know that the data isn't in fact TripleDES encrypted in the first place. I'm actually disappointed in Randall now :P. [[User:Yaztromo|Yaztromo]] ([[User talk:Yaztromo|talk]]) 19:01, 5 November 2013 (UTC)

I Hadn't seen it mentioned yet, but Monster Mash was written by Robert George Pickett (http://en.wikipedia.org/wiki/Bobby_Pickett), Whose last name goes closely with the second clue, Purloined, which means "stolen". I can't make it work, but I figured it was worth pointing out. (Nov 5th 1:26 pm utc ) [[Special:Contributions/173.245.56.24|173.245.56.24]] 13:27, 5 November 2013 (UTC)
: It's a good connection. Maybe we should reorganize the discussion and start a list of "interesting ideas we can't quite make work" in the hopes that someone else has an insight. Edgar Allan / Alan Alda, Pickett / "Pick it", Klinger / Kingler, etc. Most of these are just manifestation of the human brain's ability to find patterns even in random coincidence, of course, but one of them might be on the right track. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

Just quick thoughts.
I feel like Cpl klinger and the water type kingler is too solid a connection to ignore even though I can't really use it.
Kingler was owned in the series by Ash.
Ash is a three letter word and the last three letters of the phrase monstermash.
Monsterm=8 letters so the first block ash=3 letters in the second block.
Monsterm is about the monster.com thing, therefore purloined. It's a double reference, the .co has been purloined from the purloined website.
Then blastoise -3, or rather blastois3 - 3 (mocking the common password meme of replacing letters with numbers)
So the last password, which is super hard to guess and well chosen even with the clue is, blastoisash? It's a feasibly memorable password that would not be quickly forgotten by a pokemon fan while still being hard to guess.
Can you think of a way to check it? Maybe go into the old command line xkcd and try it as a password? (From a contributor to my talk page) --[[User:Jeff|Jeff]] ([[User talk:Jeff|talk]]) 13:52, 5 November 2013 (UTC)
: That's really a stretch. ".co is purloined from monster.com?" really? The answer will be far more obviously correct... once we figure it out. Look at the other answers, for example. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

;another quick idea for monster mash

It could be deflection. Maybe whoever put it in was paranoid. Or just dumb. Or who knows.

But, there is a pokemon that's in the monster/water(-1) hybrid group called Marshtomp.

Monster mash, mashed (ie anagrammed) can give us all but the P out of that... which is fine, as it's a 9-letter name.

Thus we have E, N and S left over (and indeed a further T, H, E), which could become overall, e.g, Marshtomens (...Marshtomethens? Or w/e), which you can split up as you like to represent something which has been stolen (personally). Possibly in german slang or something. It doesn't have to be a direct thesaurus link, it could well be complete misdirection (on Randall's behalf, or that of his notional Adobe user), same as for the pokemon.

And for the pokemon itself, it could well be "Marshtomp3" ;)

Also, don't forget about reversed words and so-on.

Heck, I've used very personal and/or random things (like, maybe two or three people in the world may recognise it in connection with me, and it's not online, at least not anywhere it can be found - basically it's just in my head and dies with me), reversed, with numbers substituting random characters, as passwords before. That covers each individual base in just one PW...

Now we just have to start feeding the guesses into a hash engine and try to figure out, maybe brute force, what the original key was. Knowing almost all of the other answers already makes this far, far easier for those who may have the facility to run the tests already. [[Special:Contributions/141.101.99.213|141.101.99.213]] 14:54, 5 November 2013 (UTC)
: This is not a real excerpt from the password file, this is a puzzle which Randall made up. Therefore, the answer to the last group will not be random, and it will not be a stretch. It will be obvious (as obvious as the previous ones)... once we figure out the catch. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 16:23, 5 November 2013 (UTC)

FWIW, Eve Online also features a "Purloined Sansha Codebreaker". [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:16, 5 November 2013 (UTC)

I agree that the solution has to be obvious - especially after its revealed. If this were a crossword puzzle, then the clues like Purloined might be followed by a question mark. Purloined? a cat that is loined - a cat that is covered with cloths? Puss in boots? Or something along those lines... [[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

purloined=phished (Corphish)? {{unsigned ip|108.162.216.227}}

i wonder if the link between the last three clues is more like a cryptic crossword puzzle---for instance, --purloined= heisted; the other clues reading it as he/is/ted...?--[[User:Wwd|Wwd]] ([[User talk:Wwd|talk]]) 22:40, 5 November 2013 (UTC)

I wonder if the pokemon could be the name of an ubuntu release, per "Not Really Into Pokemon" at http://xkcd.com/178/ --[[User:Willowy burrito|Willowy burrito]] ([[User talk:Willowy burrito|talk]]) 22:45, 5 November 2013 (UTC)

You could also abbreviate Robert Pickett's name (the co-writer of Monster Mash) as "Rob Pickett" which goes even more with purloined (the first 8 letters are now "Rob Pick"). [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:21, 6 November 2013 (UTC)

Beings that "did the mash" according to the song http://www.lyricsondemand.com/onehitwonders/monstermashlyrics.html : my monster, the ghouls, Igor, Igor's baying hounds, the coffin-bangers, "The Crypt-Kicker Five", you. Zombies, Wolf Man, Dracula/Drac, and Boris were also mentioned, but they didn't do the mash. Hope that helps someone (doesn't help me). [[User:DPWally|DPWally]] ([[User talk:DPWally|talk]]) 23:05, 6 November 2013 (UTC)

;Capitalization hints?

I have no idea who first put the capital letters in "MASH" and "Purloined" in the transcript (and I don't want to check), but now that I've gotten rid of the second (after somebody else got rid of the first), I want to record them here for the record. Possibly Randall put them in and was feeding us clues (so ''MASH'' the book or movie, and ''Purloined'' a title such as Poe's). I consider this unlikely (after all, I removed one of these capitalizations), but the possibility should be recorded. —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 01:17, 6 November 2013 (UTC)

I can't be a coincidence that this comes up as the top google news search for 'purloined:' http://www.theregister.co.uk/2013/11/05/adobe_users_purloined_passwords_were_pathetic/ {{unsigned ip|108.162.246.120}}

"38a7c9279cadeb44 9dca1d79d4dec6d5 he did the mash, he did the": Ministermash (sounds like monster mash)
"38a7c9279cadeb44 purloined": Minister (based on the character Minister D-, who stole the letter in the Edgar Allen Poe story)
"a8ae5754a2b7af7a 9dca1d79d4dec6d5 fav water-3 pokemon": OmastarSmash (Shell Smash Omastar)
So,38a7c9279cadeb44 = minister, 9dca1d79d4dec6d5 = mash, a8ae5754a2b7af7a = omastars
04:07, 6 November 2013 (UTC)
:Probably one of the best complete theories I've heard [[User:Davheld|Davheld]] ([[User talk:Davheld|talk]]) 06:26, 6 November 2013 (UTC)

I suggest "alligato" (a form of Latin ''alligatus'', perfect passive participle of ''alligo'' "bind up"), and "alligator" (Referencing "Land of 1000 Dances"). [[Special:Contributions/199.27.128.62|199.27.128.62]] 05:37, 6 November 2013 (UTC)

I think there is a transcribe mistake. 
Instead of "fav water-3 pokemon" 
Could it be "fay water-3 pokemon" 
Look at the Y and V letters in the non-chopped letters above. I think it is a Y and not a V. 
{{unsigned ip|108.162.215.51}}
*About the Pokemon, is it possible everyone's ignoring a much simpler explanation? Every Pokemon game begins with a choice of one of the three starter Pokemon, each of which have an evolutionary line of three Pokemon. In first gen, if your "favorite [is] water [from the] 3 Pokemon", then you'll be using Squirtle, followed by Wartortle and Blastoise. 2nd gen: Totodile, Croconaw, Feraligatr. 3rd gen: Mudkip, Marshtomp, Swampert. 4th gen: Piplup, Prinplup, Empoleon. Perhaps the answer uses one of these, or some combination of them? --Anon 08:57, 6 November 2013 (UTC)

Boris Blacher wrote an opera based on 'The purloined letter' This may fit with Bobby 'Boris' Pickett who sang Monster Mash [[User:YellowYeti|YellowYeti]] ([[User talk:YellowYeti|talk]]) 11:11, 6 November 2013 (UTC)

The "Boris" in "Boris Pickett" is a reference to Boris Karloff. (In his other work, Pickett doesn't use that name.) —[[User:TobyBartels|TobyBartels]] ([[User talk:TobyBartels|talk]]) 12:36, 6 November 2013 (UTC)

An alternative tack: how about Barbaracle for the Pokemon, BarbaraC(Jordan) for purloined and Barbara Clark - famous for doing Monster Mash-up novels. Does Barbara Jordan have some purloined link with watergate? {{unsigned ip|108.162.231.16}}
No, because the pokemon has a different starting string as the other two. --[[Special:Contributions/199.27.128.119|199.27.128.119]] 13:48, 6 November 2013 (UTC)

I think it is not coincidence that it is the last one that you can't solve. It may be an experiment by Randall to see if people can find a solution for a puzzle that doesn't make any sense. That said, if it does have a solution, it should not be "monstermash" since that is too close to the clue. If that was the password, everyone could guess it easily from the clue. It has to be one level "removed" from those words, guided by the clues for the matching passwords. The point of the post was that using unsalted crypt in the passwords allows you to combine clues, right? [[Special:Contributions/108.162.219.201|108.162.219.201]] 13:42, 6 November 2013 (UTC)

Not an answer, but maybe an approach: Look at it from the "what piece of information is Randall trying to tell us?" angle. In the first few puzzles, he teaches us the rules of the game. We disambiguate clues by later ones, which we can only do because of the missing salts. For example, the "name and jersey number" just tells us the format of the answer to the previous clue about Judith 15:10. Otherwise, there would have been no way to guess that exact string without the space and colon. Also, "Charlie X" and "Charlie Sheen" demonstrate that spaces are used in a "fair" way. I would not expect a trailing space on a password, for example. So what about the Pokemon then? The first half of the crypt for the Pokemon isn't used anywhere else. The easiest interpretation I can come up with is that this is just trying to restrict the common second part of the word to letters from the list of Water-3 Pokemon. Let's assume it wasn't made very difficult, so take just 'el', 'le', and 'l' from the Water-3-only group on bulbapedia. Then the puzzle is this:

something related to 'monster mash': 8 letters plus the ending 'el', 'le', or 'l'
something related to 'purloined' or related to 'letter': the same 8 letters, minus the ending
pokemon: completely unrelated, just chosen to have a well known list of 9 or 10 letter words to restrict search space for first line

I suck at crosswords, but can someone solve this restated version? There can't be that many 8 letter words that also make a word with 'el', 'le', or 'l' added to them? 15:23, 6 November 2013 (UTC) {{unsigned ip|108.162.219.201}}

: Not to insult your reasoning, which is entirely correct, but I believe your restatement is *exactly* the puzzle that (reasonable) people have been working on (and failing to solve) since Monday. As a long-time mystery hunter, I'd like to suggest the opposite: the continued failure to find some reasonable solution to the puzzle as stated above implies that *at least one* of the assumptions above is wrong. (For the record, I'd broaden your first to "...related to 'monster mash' or the show/film M*A*S*H", but again, that's the assumption we *have* been making.) So I'm especially interested in ideas *different* from the above, at this point, although not necessarily throwing out the bathtub, baby and all. Probably there's a fundamentally different way to read the first clue, or the second, or the third. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: Not insulted at all, just glad if I summarized it correctly, since I was late to the party. Maybe this helps others bootstrap. As requested, a slightly alternate view for clue 1: the word "mash" may not be part of the answer, since it appears in the clue. This means the direct answer to the clue is "monster" and has nothing to do with the song at all. The password could just be the name of a monster that is formed from something purloined plus an short ending. The endings we're already considering make nice monster names.[[Special:Contributions/108.162.219.198|108.162.219.198]] 19:54, 6 November 2013 (UTC)

:::I appreciate the summary, it helped me come up with my "keyboard mash" proposed solution, which you can see below" [[Special:Contributions/108.162.221.16|108.162.221.16]] 21:51, 6 November 2013 (UTC)

Looking at some word lists at http://www.litscape.com/words/ending_with/l/9_letter_l_end_words.html , this doesn't seem to be leading anywhere good. Can someone fix my logic? [[Special:Contributions/108.162.219.201|108.162.219.201]] 15:33, 6 November 2013 (UTC)

Not sure if anyone else has pointed out yet, but there is a pokemon named purrloin http://bulbapedia.bulbagarden.net/wiki/Purrloin_%28Pok%C3%A9mon%29 . That seems like far too much of a coincidence to not be related. [[Special:Contributions/173.245.52.211|173.245.52.211]] 16:17, 6 November 2013 (UTC)
: We'll add it to the long list of suspicious coincidences. [[User:Cscott|Cscott]] ([[User talk:Cscott|talk]]) 17:11, 6 November 2013 (UTC)
:: I don't believe the hints can be related. Note that the Pokemon's name shares zero characters with the answer to the 'purloined' clue, so they are not linked via the same password. Any semantic link is inconsistent with these being password hints from separate (imaginary) users. Maybe Randall subconsciously (or via google) went from purloined to Purrloin to names of Pokemon. [[Special:Contributions/108.162.219.198|108.162.219.198]] 19:20, 6 November 2013 (UTC)

a stretch.. but maybe a starting point?
bootlegd purloined
bootlegd ash he did the..
???whisc ash fav-3
[[Special:Contributions/108.162.215.34|108.162.215.34]]rbnm

;Hash collision

Maybe the last clues could be intended to be a hash collision? With 64-bit blocks that seems unlikely, but maybe it's a trick?
[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:29, 6 November 2013 (UTC)
:Finding the probability of a collision amounts to the birthday problem. Assuming the hash function gives all 2^64 hash values with equal probability and there are 153 million unique message blocks (probably right within an order of magnitude), we have:
:
: <pre>Pr[collision] = 1 - exp(-153000000^2/(2*2^64)) = 0.000634</pre>
:
: So the probability of a hash collision from different passwords is still quite low, even with such a large number of passwords. So it's worth assuming that all the identical hash blocks are from the same message, and keep looking for the poke-mash password.
: BTW, getting a 50% chance of a collision requires about <tt>sqrt(-2^65*ln(.5))</tt> = 5 billion unique passwords.
:[[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 21:46, 6 November 2013 (UTC)

'''Explanation for the last 3:'''

He did the mash, he did the "keyboard mash"
ASDFGHJK - L

purloined "one letter from the home row"
ASDFGHJK

Then the third one is TENTACOO - L
[[Special:Contributions/108.162.221.16|108.162.221.16]] 21:45, 6 November 2013 (UTC)
:Purloined seems like a stretch. On the other hand, 'asdfghjkl' is the 56th most common password in the real adobe data, so perhaps you're on to something. [[User:Quantum7|Quantum7]] ([[User talk:Quantum7|talk]]) 22:08, 6 November 2013 (UTC)
::I don't know, I feel like purloined has got to be a reference to the Poe story. The pun that letter means single character rather than item of correspondence is cute and funny. [[Special:Contributions/108.162.221.16|108.162.221.16]] 22:30, 6 November 2013 (UTC)
:I like this explanation --[[User:Lackadaisical|Lackadaisical]] ([[User talk:Lackadaisical|talk]]) 22:28, 6 November 2013 (UTC)

Why the restriction on the ending of the Pokemon to el, l, etc? There could be an adjective before (i.e. redkingle), so the Pokemon name could extend more into the second frame. The adjective might be some abreviated synonym for favorite, or whatever fav (or fay) stand for. [[Special:Contributions/108.162.215.34|108.162.215.34]] 22:07, 6 November 2013 (UTC)rbnm

== The last clue ==

Regarding it being actually Fay water-3 pokemon, have a look at this: http://www.serebii.net/e-reader/battle/08.shtml

The trainer is named Fay, and has a Starmie, which is a Water-3 Pokemon according to http://bulbapedia.bulbagarden.net/wiki/Water_3_(Egg_Group)

However, its only 7 characters. Not sure if it means anything, but just putting it out there.