220 [WAIFU] _HerrscherOfTheVoid Alpha Tester 737 posts 8,948 battles Report post #1 Posted October 20, 2017 (edited) Flag code: idujcouichookuul Redeem at: https://na.wargaming.net/shop/redeem/ The code was got using the message "thegatehasopened" and the keyword "fire" using the tabula recta. ================================================================================================= A lot of people will notice that there is a new flag. The code there is 7772672e616d2f70726f6d65746865616e2d66696c6573, you can use any hex-ascii converter (like http://www.rapidtables.com/convert/number/hex-to-ascii.htm) to get the url: wrg.am/promethean-files That url is a redirect to: https://worldofwarships.com/en/content/prometheantruth/ In that page, there's a link to the "PROMETHEAN TRUTH MAILING LIST", that's actually a google docs form: https://docs.google.com/forms/d/e/1FAIpQLSd8cG_L0ApU4Q69kPw1v9_aApXmOrh1ZFtQaKxLKSWIhca72g/viewform You have until 10/23 to get "more info". Thoughts? ^^ For those wondering what's "Wargaming ID": Observation: You can use your IGN instead of the ID (see EDIT3). The IGN should be easier for everyone. A Wargaming ID is the unique identifier of an account. You can change your nickname, not your ID. Is it bad if people know your WG ID? No. You can see anyone's WG ID at their API. The API url is: https://developers.wargaming.net/reference/all/wows/account/list/?application_id=demo&search=PauloBR&r_realm=na That URL will actually do this: https://api.worldofwarships.com/wows/account/list/?application_id=demo&search=PauloBR If you see what's inside that, it's JSON and contains all related accounts with that name. If you look more attentively, you will notice "{"nickname":"PauloBR","account_id":1006562801}" there. That "account_id" is my WG ID. EDIT: There's the possibility that they could mean WG IGN (if the one who did that form didn't know there is a WG account ID). I did it two times, one with WG ID and the other with WG IGN (because I want what's there :p). Both works, read the edit above. EDIT2: TheURLGuy appeared and confirmed this is legit (and time to read the documents!). EDIT3: We don't need to use our WG ID, the IGN works as well. Source: Clues 1) Words "contrast" and "credit" at the document "rasputinlives" (replacing letters from "rasputinlives", e.g. "casputinlives"). Image:https://i.imgur.com/etWSWys.png By: @Nordeit 2) Grid of letters and numbers at the document "URGENT - RE: SEA OF FORTUNE Excavation Update" (bottom right). By: @hoom 3) Post from "DarkSephiroth_96". The name is really similar to "dark_sephiroth96" (author from The Promethean Coverup blog). Could be related with the "credit" word at the first clue (maybe consider the credit loss for TK too). And TheURLGuy quoted him (to make it more obvious perhaps?) 4) Tweet from WoWS containing a tabula recta (hint at https://worldofwarships.com/en/news/common/thegatehasopened/ with "seekthetabularecta" and using an autokey is easier [ https://worldofwarships.com/en/news/common/hint-autokey/ ]). By: @ELDIFERENTE Image: 5) New missions: "A Strange Message" (I-IV). They give small amounts of credits (clue 1) and together with the grid (clue 2). By: @zdza I) 60 - Sixth letter, first column. F II) 27 - Second letter, second column. I III) 48 - Fourth letter, third column - R IV) 50 - Fifth letter, first column. E Other stuff (not sure, just easter eggs?): 1) The operation name looks like "Hallow's Eve". 2) Some dates seem to correlated with real events (2017 = 1942). Document date - What happened 10/05/1941 - ? 04/27/1942 - Mentions 04/13 when team aqua (Aquarion) attacks team fire (Promethean), strange coins = event coins 05/04/1942 - Team fire (Promethean) won vs team aqua (Aquarion) 06/12/1942 - ? 07/10/1942 - ? 08/24/1942 - ? 09/20/1942 - ? 10/18/1942 - Halloween event started (rasputinlives) 3) The same alien species (draconians) at the promethean truth is the bus driver at the "Back to school" news header (https://worldofwarships.com/en/news/common/seatbelts-everyone/). Edited October 26, 2017 by PauloBR 26 Share this post Link to post Share on other sites
9,070 [PSP] Snargfargle [PSP] Members 14,087 posts Report post #2 Posted October 20, 2017 I don't think I'm going to be entering my e-mail address and Wargaming ID into a form on Google Docs. It may be legit but it could be a phishing site too. The code I entered from my flag didn't produce this address but another. 2 Share this post Link to post Share on other sites
220 [WAIFU] _HerrscherOfTheVoid Alpha Tester 737 posts 8,948 battles Report post #3 Posted October 20, 2017 Just now, Snargfargle said: I don't think I'm going to be entering my e-mail address and Wargaming ID into a form on Google Docs. It may be legit but it could be a phishing site too. The code I entered from my flag didn't produce this address but another. Why wargaming would do it? If you don't trust my url, just open the url at "That url is a redirect to:" that is in worldofwarships.com domain and click the ""PROMETHEAN TRUTH MAILING LIST" like I said. Share this post Link to post Share on other sites
9,070 [PSP] Snargfargle [PSP] Members 14,087 posts Report post #4 Posted October 20, 2017 It's still weird that WG would have you enter your e-mail address and ID into a form on Google.docs. Share this post Link to post Share on other sites
9,070 [PSP] Snargfargle [PSP] Members 14,087 posts Report post #5 Posted October 20, 2017 LOL, I just actually read that Google Docs page in its entirety. This is what it says in fine print at the bottom: Spoiler Never submit passwords through Google Forms. 1 Share this post Link to post Share on other sites
473 LemonadeWarrior Members 1,776 posts 6,729 battles Report post #6 Posted October 20, 2017 (edited) 13 minutes ago, Snargfargle said: I don't think I'm going to be entering my e-mail address and Wargaming ID into a form on Google Docs. It may be legit but it could be a phishing site too. The code I entered from my flag didn't produce this address but another. Mine did. Perhaps you misstyped your code. Still weird to ask some of your account information indeed. Edited October 20, 2017 by joris92 Share this post Link to post Share on other sites
1,282 [ARP] The_first_harbinger Members 3,681 posts 8,111 battles Report post #7 Posted October 20, 2017 Interesting find! URL guy strikes again! 2 Share this post Link to post Share on other sites
220 [WAIFU] _HerrscherOfTheVoid Alpha Tester 737 posts 8,948 battles Report post #8 Posted October 20, 2017 (edited) 8 minutes ago, Snargfargle said: It's still weird that WG would have you enter your e-mail address and ID into a form on Google.docs. 4 minutes ago, Snargfargle said: LOL, I just actually read that Google Docs page in its entirety. This is what it says in fine print at the bottom: Hide contents Never submit passwords through Google Forms. Your wargaming account id is NOT your password and there's no harm sharing it. The max that could happen is WG spamming your e-mail but why would they (they already have it too)? I don't share your concerns. PS: I updated it with the hexadecimal code so you can see by yourself. Edited October 20, 2017 by PauloBR Share this post Link to post Share on other sites
2,550 [SYN] Kapitan_Wuff Members 8,256 posts 14,111 battles Report post #9 Posted October 20, 2017 4 minutes ago, Snargfargle said: LOL, I just actually read that Google Docs page in its entirety. This is what it says in fine print at the bottom: Reveal hidden contents Never submit passwords through Google Forms. They don't ask for a password. Just email and IGN. Share this post Link to post Share on other sites
220 [WAIFU] _HerrscherOfTheVoid Alpha Tester 737 posts 8,948 battles Report post #10 Posted October 20, 2017 (edited) 2 minutes ago, Kapitan_Wuff said: They don't ask for a password. Just email and IGN. They ask for your Wargaming ID actually. And that information is public. If you search your IGN at their API, they will send you your WG ID because thats unique (differently from your nickname that can change). Edited October 20, 2017 by PauloBR Share this post Link to post Share on other sites
3,979 [V_KNG] Herr_Reitz Beta Testers 13,192 posts Report post #11 Posted October 20, 2017 I see it this way... if Niko tells us it is safe to participate in the website then sure. Until that moment, nope. Share this post Link to post Share on other sites
29 nickalaso123 Beta Testers 107 posts 4,463 battles Report post #12 Posted October 20, 2017 Looks like another spooky scavenger hunt has begun... Share this post Link to post Share on other sites
2,550 [SYN] Kapitan_Wuff Members 8,256 posts 14,111 battles Report post #13 Posted October 20, 2017 4 minutes ago, PauloBR said: They ask for your Wargaming ID actually. And that information is public. If you search your IGN at their API, they will send you your WG ID because thats unique (differently from your nickname that can change). I didn't know they were different, good to know. Share this post Link to post Share on other sites
5,683 [PVE] Kizarvexis Members 20,162 posts 13,047 battles Report post #14 Posted October 20, 2017 8 minutes ago, PauloBR said: Your wargaming account id is NOT your password and there's no harm sharing it. The max that could happen is WG spamming your e-mail but why would they (they already have it too)? I don't share your concerns. PS: I updated it with the hexadecimal code so you can see by yourself. I put in my email and my Kizarvexis WG ID and got the following. Spoiler Share this post Link to post Share on other sites
29 nickalaso123 Beta Testers 107 posts 4,463 battles Report post #15 Posted October 20, 2017 1 minute ago, Kizarvexis said: I put in my email and my Kizarvexis WG ID and got the following. Hide contents WG ID should be your in-game username right? Share this post Link to post Share on other sites
11 [IBAD] k55e5bd1 Members 77 posts 6,039 battles Report post #16 Posted October 20, 2017 (edited) is the WG ID = Wargaming.net OpenID? Edited October 20, 2017 by k55e5bd1 Share this post Link to post Share on other sites
220 [WAIFU] _HerrscherOfTheVoid Alpha Tester 737 posts 8,948 battles Report post #17 Posted October 20, 2017 (edited) For people that are afraid about some sensitive data leaking: They ask 2 things at that docs: e-mail and Wargaming ID. E-mail: well, they know your e-mail now... I would worry about that. Wargaming ID: this is a public information. You can access their API and get yours (or from anyone). API url: https://api.worldofwarships.com/wows/account/list/?application_id=demo&search=PauloBR Just change the "search" to the nickname that you want and... {"nickname":"PauloBR","account_id":1006562801} There's my WG ID. Edited October 20, 2017 by PauloBR Share this post Link to post Share on other sites
1,891 [FML] UltimateNewbie Members 4,148 posts 16,060 battles Report post #18 Posted October 20, 2017 7 minutes ago, Herr_Reitz said: I see it this way... if Niko tells us it is safe to participate in the website then sure. Until that moment, nope. QFT. It seems quite odd. Also, if you visit the other links in the worldofwarships page, instead of just the mailing list, and then go visit those links, you get into some wierd stuff rather rapidly. 1 Share this post Link to post Share on other sites
220 [WAIFU] _HerrscherOfTheVoid Alpha Tester 737 posts 8,948 battles Report post #19 Posted October 20, 2017 10 minutes ago, Kapitan_Wuff said: I didn't know they were different, good to know. 8 minutes ago, nickalaso123 said: WG ID should be your in-game username right? 8 minutes ago, k55e5bd1 said: is the WG ID = Wargaming.net OpenID? I updated the first post with what's WG ID and one way to get it. Share this post Link to post Share on other sites
3,281 [WG-CC] SireneRacker Wiki Editor, Members 9,097 posts 7,989 battles Report post #20 Posted October 20, 2017 Thanks for that info Paulo ^.^ Share this post Link to post Share on other sites
3,660 [-K-] Ace_04 Members 8,491 posts 14,883 battles Report post #21 Posted October 20, 2017 And what do we get for all this running around? Share this post Link to post Share on other sites
193 Cognitive_Dissonance Members 575 posts 3,075 battles Report post #22 Posted October 20, 2017 WG already has your email address, the ID is publicly available. Any script kiddie hacker of the noobish stage could get your Wargaming ID, the link came from WG. I did it. If anything terrible happens I will let you know - but I doubt anything horrible will happen. Thanks OP. I figured it was HEX but you already did all the work. Share this post Link to post Share on other sites
8 [BARON] WarDemon1 Members 27 posts 13,437 battles Report post #23 Posted October 20, 2017 (edited) Yeah, I went to the site, but I didn't subscribe to the newsletter. Is that all it does? Confused why WG would push an alien's are real blog. Edited October 20, 2017 by WarDemon1 1 Share this post Link to post Share on other sites
220 [WAIFU] _HerrscherOfTheVoid Alpha Tester 737 posts 8,948 battles Report post #24 Posted October 20, 2017 Some people might think: "Why WG ID instead of our WG IGN?" I can't answer to that since I'm not a WG employee. There was a lot of ways for them like: use the same e-mail as your account, input your WG IGN, ... But they chose ID for some reason. 4 minutes ago, Ace_04 said: And what do we get for all this running around? No idea. They didn't say anything or post anything until now. Maybe it's a "hidden event"? That's what i'm hoping for. 1 minute ago, WarDemon1 said: Yeah, I went to the site, but didn't subscribe to a newsletter. Is that all it does? Confused why WG would push an alien's are real blog. Like I wrote for Ace, my hope it's a hidden event. Share this post Link to post Share on other sites
1,477 [HINON] renegadestatuz Members 7,656 posts 8,214 battles Report post #25 Posted October 20, 2017 7 minutes ago, Ace_04 said: And what do we get for all this running around? It’s more than likely another scavenger hunt by the url guy like we had for the flag earlier in the year. Share this post Link to post Share on other sites