Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Virtual Cybersecurity Escape Room

eloeffler.gitlab.io

Post reply on HN
Print view View original

61–70 of 95 posts

Re: Virtual Cybersecurity Escape Room

#61

Post by illuminated »

gpderetta wrote: post #53
illuminated wrote: post #52

Earlier quoted context omitted.

You can find all the info for logging in to the bank account, but I couldn't find a location information there (or I did not recognize it).

I did manage to log in to the company account and delete the standing order. I couldn't find the account id for her bank account. Is it supposed to be there? I'll keep looking. edit: the WIP message in the messaging system makes me think that you can't yet track the Annie. Also, is it supposed to be so simple to find the account password?

Ah, my bad... didn't find the personal acc number as well. The passwords are way too easy to find, yes, but you're not tracking down a security engineer but an "everyday Karen" :)

Re: Virtual Cybersecurity Escape Room

#62

Post by newzucanuze »

Love the concept, but gave up without any progress. I would mirror much of the previous feedback:

- Make the first puzzle much easier. A quick win would help hook us in.

- The password could be either kid (or is Daniel the husband?), any capitalization, date format, spacing, etc. Too much to brute force by hand.

- The clicking is wonky and I often wondered if I was missing something.

Re: Virtual Cybersecurity Escape Room

#63

Post by doomslice »

umvi wrote: post #33
Hackbraten wrote: post #10

Earlier quoted context omitted.

How can you narrow down the date exactly? The vacation is one week long so the date could be any working day, couldn’t it?

Well, apparently she has 2 kids? Ryan and Daniel (mug reveals "Daniel" with a crudely drawn baby). Then if you look at the calendar you can see Daniel was born June 12 and Ryan was born December 5, but beyond that I can't figure out a year. Username is "anne.kingston" but I've tried all the following passwords to no avail: - June12 - june12 - 612 - December5 - december5 - 125

DDMM is what we were supposed to guess somehow. Fine to have to guess that for a pen test or real security analysis, less fun for a game where you have no clue if you're really on the right track.

Re: Virtual Cybersecurity Escape Room

#64

Post by nottorp »

illuminated wrote: post #49
nottorp wrote: post #44

Earlier quoted context omitted.

Yep, clicking is iffy on Firefox/Mac here too. Nice work, but as an old gamer I'm wondering if throwing the graphics in some established game engine wouldn't have made it work more consistently :)

I kind of enjoy the graphics... Makes the focus to be shifted on the actual gameplay. You care about the process of discovery more this way. At least that's how it worked for me, but I'm not a regular game player person.

The graphics is a stylistic choice and they can fit in any engine, but maybe clicking would have been more consistent :)

Re: Virtual Cybersecurity Escape Room

#65

Post by jebbis »

Did anybody else notice the password d3cem8er5 generates the correct cheapHash of 3880, but the salted hash fails. I get redirected to a non-existing page (ie. get a 404). Was that an intentional red herring or just a coincidence lol?

Re: Virtual Cybersecurity Escape Room

#66

Post by illuminated »

nottorp wrote: post #64
illuminated wrote: post #49

Earlier quoted context omitted.

I kind of enjoy the graphics... Makes the focus to be shifted on the actual gameplay. You care about the process of discovery more this way. At least that's how it worked for me, but I'm not a regular game player person.

The graphics is a stylistic choice and they can fit in any engine, but maybe clicking would have been more consistent :)

Agreed! :)

Re: Virtual Cybersecurity Escape Room

#67

Post by eloeffler »

mumblehat wrote: post #11
eloeffler wrote: post #9

Earlier quoted context omitted.

Hint is here :) https://txt.fyi/-/20336/e86ca3bf/

Still didn't help me. I've seen both hints and seen the calendar, and after 6 attempts I had to give up, felt a bit frustrated. Maybe accept a range of different answers?

That's a very good idea.Here's a spoiler with the password :)

https://txt.fyi/-/20336/ede282d7/

Re: Virtual Cybersecurity Escape Room

#68

Post by eloeffler »

ayacoe wrote: post #14

I think it's nice. I'd defintely play another one if you made it. I completed the first part of the puzzle, but wasn't able to figure out where Anne went.

Thanks! That last part is actually still incomplete. I'll let you know when there is a new version.

It's great to know you like the game type. I've considered turning this into an easily adaptable format so this is within our scope :)

Re: Virtual Cybersecurity Escape Room

#69

Post by dang »

eloeffler wrote: post #23
Hackbraten wrote: post #15

Earlier quoted context omitted.

Thank you for your reply. How would I be able to read the calendar? Is there a minimum resolution to play this game?

I had to make another account because my other one is too new and got blocked for posting too fast \o/ The calendar should be clickable and it should then be readable. But I've just tested and there seems to be a glitch that makes it hard to click. Try to click on the black lines! I'll fix this soon as possible.

Ack, I'm really sorry—the rate limiting is harsher on new accounts because of past activity by spammers and trolls, and is definitely not intended to throttle legit users like yourself.

I've allowed the stuck comments to go through and have merged the comments from your second account back into this one, so they're all in one place. I've also marked this account legit so you can post as much as you want. Welcome to HN in any case! Let us know at hn@ycombinator.com if we can help with anything.

Post reply on HN