jan
05

df73b956808cd23d30c76725215c9e0e live.free.fr

devquotes-team french, News 2012-01-05

Today the free.fr staff updated his ascii art space chip (at http://live.free.fr) with the following hash :

df73b956808cd23d30c76725215c9e0e

Atm, this hash has not yet been broken. Will you be the one to find it ?
Maybe it is the startup date of the Free Mobile offer ?

A few hours later, the hash was updated to:

efb7929e6a5b7dcc6ebb79aa3c45af13

This one was quickly cracked: it is corresponding to the checksum for the string jesaispas.

You may also find the following hash on http://www.free.fr/adsl

901b3221b8a74073b6a76371171b69f0

Which was cracked as well: launchpad

We have been informed of a hash that has been Twitted but we can’t confirm that it comes from Free:

e84f1fc5c9fdea09f8f4a1ae2adde8a4

It was cracked a few minutes ago by one of our readers: call3179
Thanks to olahaye74!

You may also be interested into our other post about monitoring the checksum on http://live.free.fr.

EDIT:
We are still trying to crack the first hash. We chosen to generate all dates matching the XX/XX/XXXX format and then use some rainbow tables. Any other idea ?
We are now really close to breaking the hash. Our hashing machines are running for 3 complete hours, and we can say the hash is at least 13 characters long.
Stay tuned!

If you wanna retrieve the md5 hash, here is the script (not from us, I found it on gist.github.com):

#!/bin/bash
# troll: If you don't have bash, go get a real OS.

curl -s "http://md5.noisette.ch/md5.php?hash=$(curl -s http://live.free.fr | gunzip | tail -n 36 | head -n 32 | grep '[a-f0-9]' -o | xargs echo -n | sed 's/ //g')" | grep '<string>' | sed 's/^.*\[CDATA\[\(.*\)\]\].*$/\1/'

, , ,
Address: http://www.devquotes.com/2012/01/05/df73b956808cd23d30c76725215c9e0e/
«
»
Trackback

53 comments untill now

  1. devquotes-team @ 2012-01-05 10:39

    The hash seems to change.
    maybe a countdown ?

  2. devquotes-team @ 2012-01-05 10:42

    last one is efb7929e6a5b7dcc6ebb79aa3c45af13
    not changing each minute.
    Any idea ?

  3. devquotes-team @ 2012-01-05 10:44

    last md5 has is :

    efb7929e6a5b7dcc6ebb79aa3c45af13 cracked -> jesaispas

  4. zanadoo @ 2012-01-05 10:47

    je dirais plutot
    df7 3b 9 5 6808cd 23d30 c76725 215 c 9e0e

  5. Maypeur @ 2012-01-05 11:16

    Maybe it’s a count down by hour !!

  6. fwed @ 2012-01-05 11:23

    maybe an enigma like
    live.free.fr/efb7929e6a5b7dcc6ebb79aa3c45af13.php

    who knows :)

  7. devquotes-team @ 2012-01-05 11:30

    for the lulz, just get that in analytics result :

    « que signifie df73b956808cd23d30c76725215c9e0e en md5″

    #lesgens

  8. fwed @ 2012-01-05 11:33

    a facebook page seems to be really related to this
    https://www.facebook.com/LaMamieDuCantal

  9. devquotes-team @ 2012-01-05 11:57

    Non, faire un montage photo de la fusée #FreeMobile avec le Monsieur tout nu de #LaRedoute n’est pas une bonne idée via @JeanDjer

  10. Vivi63 @ 2012-01-05 14:11

    Use my site to check your md5 is you want to : http://www.x-ray.fr/passwd_md5.php?lang=en

  11. fwed @ 2012-01-05 14:15

    we are now really close of the breaking of the hash df73b956808cd23d30c76725215c9e0e

    our hashing machine runs for now 3 complete hours, and we can say the hash is at least 13 characters long

    stay tuned!

  12. Maypeur @ 2012-01-05 15:34

    Is it the timestamp for the 6 january 13h37 ?

  13. Zokoï @ 2012-01-05 15:48

    le 1er fait 13 caractères… peut être « Datelancement » et le 2eme serait donc la réponse : « jesaispas » :)

  14. Pouip @ 2012-01-05 16:16

    901b3221b8a74073b6a76371171b69f0 dans la source de http://www.free.fr/adsl

    md5 de launchpad

  15. Zizounnette @ 2012-01-05 16:17

    @Pouip sois plus précis plz :)

  16. Pouip @ 2012-01-05 16:31

    @Zizounnette

    Hmm, je vois pas comment être plus précis :D

    http://www.free.fr/adsl

    Dans la source, il y a la ligne

    et 901b3221b8a74073b6a76371171b69f0 se trouve être le md5 de launchpad

  17. Zizounnette @ 2012-01-05 16:33

    ah ok. sry :)

  18. Darkomen @ 2012-01-05 16:50

    Y a un certain Xavierducantal qui tweet e84f1fc5c9fdea09f8f4a1ae2adde8a4
    Pas sûr que ça soit quelqu’un de chez Free, mais dans le doute.

  19. lorifan @ 2012-01-05 16:53

    http://leet.free.fr/

    affiche « Y’a rien a voir ici. »

  20. lorifan @ 2012-01-05 16:55

    leet.free.ff

    affiche « Y’a rien a voir ici. »

  21. Maypeur @ 2012-01-05 16:59

    LOOL :

    Free attend qu’un nolife decrypt le md5 de la fusee pour lancer free mobile !!

  22. olahaye74 @ 2012-01-05 17:25

    @Darkomen:

    le md5 e84f1fc5c9fdea09f8f4a1ae2adde8a4 veut dire:
    call3179

  23. olahaye74 @ 2012-01-05 17:28

    @Darkomen: la réponse est call3179 en 15 minutes sur une pauvre Nvidia C2070

    $ ./gpu_md5_crack_0.2.3 -h e84f1fc5c9fdea09f8f4a1ae2adde8a4 -s a -t 1000000000000
    GPU_MD5_Crack v0.2.3 09 July 2009 LGPL for BackTrack 4.
    Copyright (C) 2009 TitanMKD ([email protected]).
    MD5 Hash:e84f1fc5c9fdea09f8f4a1ae2adde8a4, Start Password:a, Total pwd to check:1000000000000
    Charset used 2:abcdefghijklmnopqrstuvwxyz0123456789
    Using default CUDA GPU device:0
    Cuda device ID:0, Device name:Tesla C2070, supporting CUDA:2.0,
    multiProcessorCount:14, clockRate:1147.00 MHz, TotalMem:5375.44 MB
    MD5 brute force started
    Progress 23%, Pwd:cakpn0ea, Instant 254.57 Mhash/s(31.43 ms)
    MD5 Cracked pwd=call3179 hash=e84f1fc5c9fdea09f8f4a1ae2adde8a4
    Instant 200.02 Mhash/s(40.00 ms)
    Average 252.62 Mhash/s, Total Time:942.21s(942210.00 ms)
    MD5 brute force finished

  24. Darkomen @ 2012-01-05 17:41

    Appeler le 3179 pour avoir son RIO et changer d’opérateur, ça ce tiens, @xavierducantal est peut-être pas si bidon.

  25. jghm @ 2012-01-05 17:46

    @olahaye74
    et pour l’autre code ?

    df73b956808cd23d30c76725215c9e0e

    tu veux pas essayer ?

  26. 3d @ 2012-01-05 17:50

    De notre coté, tjs rien non plus.
    On creuse, on creuse !

  27. olahaye74 @ 2012-01-05 17:53

    Mes 49 GPU M2090 sont dans des cartons, pas le temps de monter tout ça avant demain :-(
    De toutes façons, si c’est plus de 13 lettres, il me faut 3ans avec ce code.
    en admettant que je ne test QUE les mots de 13 lettres et que je suppose que je trouve en moyenne le mot de passe en ne testant que la moitié des hash, ça fait 6 mois……..

    Bref, il y a bien mieux que moi. J’ai juste compilé un code cuda pour jouer et tester une carte avec qualque-chose de plus fun que bandWidthTest.

    J’ai testé la bruteforce qjusqu’à 9 lettres pour df73b956808cd23d30c76725215c9e0e mais ça n’a rien donné, alors je rends le gpu à ceux qui en ont vraiment besoin……..

  28. Benjamin BTJB @ 2012-01-05 18:28

    df73b956808cd23d30c76725215c9e0e = SLOW DOWN COWBOY!

  29. Benjamin BTJB @ 2012-01-05 18:48

    Sorry error on my previous post there is no correspondance between the hash and what i’ve wrote …

  30. luc @ 2012-01-05 19:56

    df73b956808cd23d30c76725215c9e0e is not SLOW DOWN COWBOY! as far as I can see.

  31. BenJ @ 2012-01-05 21:56

    Have you tried to encode all epoch date from now ?
    Or all date like « 01/01/1970 00:00:00″ ?

  32. djmerial @ 2012-01-06 01:33

    df73b956808cd23d30c76725215c9e0e

    il faudrait essayer d’injecter les fonction php soudex et/ou metaphone dans ces mots, je ne sais pas si ca a qq qu chose à voir mais bon je tente

    D123
    TFBKTTKK

  33. shavounet @ 2012-01-06 09:50

    Maybe you can try W3C Datetime format :
    http://www.w3.org/TR/NOTE-datetime

    Or timestamps

  34. Jerome @ 2012-01-06 11:05

    thank you for the answer, I translated this article in french here : http://www.info-du-jour-en-france.fr/2012/01/06/forfait-mobile-free-le-mysterieux-code-de-la-fusee-decrypte/

  35. devquotes-team @ 2012-01-06 11:08

    ok. No problem. Plz just add a link on devquotes URL ;)

  36. guilalune @ 2012-01-06 14:12

    Found and published here :
    http://www.pcinpact.com/news/68059-free-mobile-code-secret-lancement.htm

    NIEL JOIN RACE >>START
    Translation based on ASCII table …

  37. yo @ 2012-01-06 14:33

    il y a un lein flash embarqué sur la page de mobile.free.fr et live.free.fr.
    voici le lien :
    http://d3lvr7yuk4uaui.cloudfront.net/items/e6a00/storage.swf

    il n’y a pas d’image, juste du texte :
    Initializing…
    Ready! Firing onload if provided

  38. devquotes-team @ 2012-01-06 14:45

    Where did you found this swf ?
    no way for me to find any relation between the swf and the websites.

  39. swf @ 2012-01-06 15:15

    Quelqu’un a-t-il essayé de décompiler le swf?

  40. guillaume @ 2012-01-06 15:40

    No swf, neither mobile.free.fr nor live.free.fr. Seems that was just a disturbing comment…

  41. KenjiBaru @ 2012-01-06 15:57

    Faites  » ↑ ↑ ↓ ↓ ← → ← → b a + Entrée  » sur la page http://free.fr/adsl/

  42. Julien @ 2012-01-06 16:01

    Le « Entrée » n’est pas nécessaire

  43. theloveboat @ 2012-01-06 16:02

    very nice!!!

  44. guillaume @ 2012-01-06 16:04

    Well, i’m really not sure about it, but given:

    - 1337 means LEET
    - and the second hash (efb7929e6a5b7dcc6ebb79aa3c45af13) was uncrypt by reverse ascii leet (ef b7 92 9e 6a 5b 7d cc 6e bb 79 aa 3c 45 af 13 => NIEL JOIN RACE)
    - and 1337 might mean 13,37

    Then, i gave a try with reverse ascii too for the first hash:

    df73b956808cd23d30c76725215c9e0e
    df:73:b9:56:80:8c:d2:3d:30:c7:67:25:21:5c:9e:0e
    D s | V Ç Î T = 0 1 g % ! \ R SO

    that (with some headhakes and blanks) gives:

    Ds| VÇÎT = 01g% ! \R SO
    DSL VAT = 19% ! \r

    Then applying 13,37 x 19,6% (the french taxe rate), we find = 15,99, probably the price of the free offer.

    So, headhakes or not headhakes ?

  45. devquotes-team @ 2012-01-06 16:10

    Nice work.
    Glad to see someone trying to solve this problem as hard as you are doing :p

  46. guillaume @ 2012-01-06 16:16

    @devquotes-team sometimes simple logic and observation are faster that a non-end distributed computing looking for a reverse hash leading to « jesaispas » ;)

  47. guillaume @ 2012-01-06 16:55

    The last 3 chars could be a cariage return (\r) and a shift out (SO) notifying the character set switch (ascii/text). But that brings even more headhakes…

  48. guillaume @ 2012-01-06 17:04

    According to a twitter feedback on the missing ShiftIn, in case it’s a ShiftOut at the end:
    http://twitter.com/#!/icreatefrance/status/155316929702268930

    We could simplify the results as following:
    df:73:b9:56:80:8c:d2:3d:30:c7:67:25:21:5c:9e:0e
    D s | V Ç Î T = 0 1 g % ! \ R SO
    []SI VAT = 019%! \r SO

    [] : the invite
    SI : shift in
    \r cariage return
    SO : shift out

    Then the result would simply be:

    > VAT = 19% ! <

    Still a hudge doubt, but much nicer!

  49. theloveboat @ 2012-01-06 23:59

    Ca y est : on harnache les chevaux aux roulottes

  50. Redbull @ 2012-01-07 09:23

    If anyone knows something about the .avi file at leet.free.fr/test, tell us :)

  51. Pouip @ 2012-01-07 14:35

    @guillaume

    C’est COMPLÈTEMENT n’importe quoi de lire du ASCII sur le hash md5.

    La probabilité que le hash d’une phrase (jenesaispas) veuille dire quelque chose en ASCII est quasi nulle.

    NIEL JOIN RACE, c’est 100 % bidon.

  52. theloveboat @ 2012-01-07 17:06

    Update : La caravane se met en route vers le chateau

  53. olahaye74 @ 2012-01-11 10:38

    Bon, maintenant, que l’offre free est dispo, tout le monde se moque de connaitre la valeure de ce hash?

    Nobody able to crack this hash?

Add your comment now

CommentLuv badge