Comments on: The Dharma Initiative and the Ba Gua http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua The personal website of Paulo Ordoveza Sun, 26 Oct 2008 23:07:05 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Ace Miel http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3980 Ace Miel Fri, 14 Oct 2005 06:14:15 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3980 Hi there, Paolo and the rest of the guys. Very nice thread you have here. I am from the Philippines and works as a web designer here is Makati City. The logo of the Dharma Initiative really looks like a Ba Gua although there seems to be a hidden code in the design of the lines used, a kind of morse-code. We have a Ba Gua at home too, so I'm also familiar with the shape. Here's my bit. I checked out the login at the URL: <a href="http://thedharmainitiative.org/" rel="nofollow"><a href="http://thedharmainitiative.org/" rel="nofollow"><a href="http://thedharmainitiative.org/" rel="nofollow">http://thedharmainitiative.org/</a></a></a> and opened the source for the login popup and saw at the top of the code that a javascript point to this location: <a href="http://thedharmainitiative.org/md5.js." rel="nofollow"><a href="http://thedharmainitiative.org/md5.js." rel="nofollow"><a href="http://thedharmainitiative.org/md5.js." rel="nofollow">http://thedharmainitiative.org/md5.js.</a></a></a> I also found out they are using a Javascript MD5 algorithm for the login password and the lines in their code goes like this: function checkForm() { var url="login/?uid=" + escape(document.forms[0].elements['uid'].value) + "&pwd=" + escape(document.forms[0].elements['pwd'].value) var hash = hex_md5(document.forms[0].elements['uid'].value + document.forms[0].elements['pwd'].value); if ((hash == "4ce8eb77952dcf34505de7e04fd68fc7") || (hash == "732d9dda7f79c827c4453bda8f2d441a")) { window.opener.location.href=url; window.close(); } else { document.forms[0].elements['errorMessage'].value = "Invalid login"; document.forms[0].elements['uid'].value = ''; document.forms[0].elements['pwd'].value = ''; document.forms[0].elements['uid'].focus(); } return false; } Although I haven't seen any of these MD5 hashes reversed-engineered, knowing that these hashes are there to access the login might help somehow in our quest for the username and password: "4ce8eb77952dcf34505de7e04fd68fc7" and "732d9dda7f79c827c4453bda8f2d441a" (from the script above). Here is the website where the script was taken, including a demo of a script calculating the hash for any password using MD4, MD5, and SHA-1: <a href="http://pajhome.org.uk/crypt/md5/" rel="nofollow"><a href="http://pajhome.org.uk/crypt/md5/" rel="nofollow"><a href="http://pajhome.org.uk/crypt/md5/" rel="nofollow">http://pajhome.org.uk/crypt/md5/</a></a></a> I haven't read much yet on this type of authentication so I'm just guessing that maybe people who are interested in "decoding" the username and password for the login might be able to use this demo script for an easier search of the said username and password by trial and error and comparing the results to the hashes calculated. Maybe somebody out there can confirm or gun this crazy idea down. Thanks and nice show for all of us who appreciate a good puzzler. P.S. I get my shows via torrent so I watch the latest episode every Thursday local time, several hours after some guy has shared it via torrent. People who don't know the torrent sites and are interested may email me. No flames please, I don't take criticism well. Hi there, Paolo and the rest of the guys. Very nice thread you have here. I am from the Philippines and works as a web designer here is Makati City. The logo of the Dharma Initiative really looks like a Ba Gua although there seems to be a hidden code in the design of the lines used, a kind of morse-code. We have a Ba Gua at home too, so I’m also familiar with the shape.

Here’s my bit. I checked out the login at the URL: http://thedharmainitiative.org/ and opened the source for the login popup and saw at the top of the code that a javascript point to this location: http://thedharmainitiative.org/md5.js.

I also found out they are using a Javascript MD5 algorithm for the login password and the lines in their code goes like this:

function checkForm() {

var url=”login/?uid=” + escape(document.forms[0].elements['uid'].value) +

“&pwd=” + escape(document.forms[0].elements['pwd'].value)

var hash = hex_md5(document.forms[0].elements['uid'].value + document.forms[0].elements['pwd'].value);

if ((hash == “4ce8eb77952dcf34505de7e04fd68fc7″) || (hash == “732d9dda7f79c827c4453bda8f2d441a”)) {

window.opener.location.href=url;

window.close();

} else {

document.forms[0].elements['errorMessage'].value = “Invalid login”;

document.forms[0].elements['uid'].value = ”;

document.forms[0].elements['pwd'].value = ”;

document.forms[0].elements['uid'].focus();

}

return false;

}

Although I haven’t seen any of these MD5 hashes reversed-engineered, knowing that these hashes are there to access the login might help somehow in our quest for the username and password:

“4ce8eb77952dcf34505de7e04fd68fc7″ and “732d9dda7f79c827c4453bda8f2d441a” (from the script above).

Here is the website where the script was taken, including a demo of a script calculating the hash for any password using MD4, MD5, and SHA-1:

http://pajhome.org.uk/crypt/md5/

I haven’t read much yet on this type of authentication so I’m just guessing that maybe people who are interested in “decoding” the username and password for the login might be able to use this demo script for an easier search of the said username and password by trial and error and comparing the results to the hashes calculated. Maybe somebody out there can confirm or gun this crazy idea down. Thanks and nice show for all of us who appreciate a good puzzler.

P.S. I get my shows via torrent so I watch the latest episode every Thursday local time, several hours after some guy has shared it via torrent. People who don’t know the torrent sites and are interested may email me. No flames please, I don’t take criticism well.

]]> By: David http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3979 David Fri, 14 Oct 2005 05:16:22 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3979 doesn't this remind you of The Lord Of The Flies? doesn’t this remind you of The Lord Of The Flies?

]]> By: Edubs http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3978 Edubs Fri, 14 Oct 2005 04:13:22 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3978 What if this is some big experiment in itself. Not to much to study, but the writers wrote something, and are letting us take it the rest of the way. Maybe they have no idea what season three is going to be. They are just listening too all of our crazy crackpot theories and taking what they like? I mean, all of what you could be saying could be true. Its like writing a story with a group of friends, just one person writes a sentance and then each other person writes one. ALthough in this instance, some guys got together, used all the other shows that fans get rabid about as a basis and thought, lets get them started, and then take form thier ideas, and in the end maybe produce nothing but a never ending show that would go anywhere, and in theory never end or have any meaning. What if this is some big experiment in itself. Not to much to study, but the writers wrote something, and are letting us take it the rest of the way. Maybe they have no idea what season three is going to be. They are just listening too all of our crazy crackpot theories and taking what they like? I mean, all of what you could be saying could be true. Its like writing a story with a group of friends, just one person writes a sentance and then each other person writes one. ALthough in this instance, some guys got together, used all the other shows that fans get rabid about as a basis and thought, lets get them started, and then take form thier ideas, and in the end maybe produce nothing but a never ending show that would go anywhere, and in theory never end or have any meaning.

]]> By: sulepa http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3977 sulepa Fri, 14 Oct 2005 03:43:05 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3977 on the pre-board check in that i just mentioned, if you anagram it into the boxes as "other man" not only do the letters center themselves perfectly, you get a quick video clip that startled the heck outta me when it started. on the pre-board check in that i just mentioned, if you anagram it into the boxes as “other man” not only do the letters center themselves perfectly, you get a quick video clip that startled the heck outta me when it started.

]]> By: sulepa http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3976 sulepa Fri, 14 Oct 2005 03:39:08 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3976 why does the pre-board check in give me the name ETHAN ROM with boxes underneath to make an anagram? why does the pre-board check in give me the name ETHAN ROM with boxes underneath to make an anagram?

]]> By: Anonymous http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3975 Anonymous Fri, 14 Oct 2005 03:25:06 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3975 Help me with the seating chart please... Is there something wrong with my computer? I can only get the seat info for: Locke Charlie The Marshall Jack Boone Shannon Rose Kate Ana Lucia How do I get everyone else to appear? Also why does the F keep flashing at the bottom? And when you click on Kate, why does the flight number change to 777? Help me with the seating chart please… Is there something wrong with my computer? I can only get the seat info for:

Locke

Charlie

The Marshall

Jack

Boone

Shannon

Rose

Kate

Ana Lucia

How do I get everyone else to appear? Also why does the F keep flashing at the bottom? And when you click on Kate, why does the flight number change to 777?

]]> By: sulepa http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3974 sulepa Fri, 14 Oct 2005 03:12:00 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3974 dharma can mean life or death depending upon the religion. dharma & greg was also an abc show. dharma can mean life or death depending upon the religion. dharma & greg was also an abc show.

]]> By: AAron http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3973 AAron Fri, 14 Oct 2005 02:46:17 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3973 Did anyone notice that if you go to the driveshaft website(http://www.driveshaftband.com/driveSHAFTMusic2.htm) and look at the discography section under music at the top of the page, in the special thanks section it lists the names of several notorious Seinfeld characters? Did anyone notice that if you go to the driveshaft website(http://www.driveshaftband.com/driveSHAFTMusic2.htm) and look at the discography section under music at the top of the page, in the special thanks section it lists the names of several notorious Seinfeld characters?

]]> By: kletus http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3972 kletus Fri, 14 Oct 2005 02:27:26 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3972 ok and what the heck is this <a href="http://www.oceanicflight815.com/" rel="nofollow"><a href="http://www.oceanicflight815.com/" rel="nofollow"><a href="http://www.oceanicflight815.com/" rel="nofollow">http://www.oceanicflight815.com/</a></a></a> seating chart page way to much info to absorb but def. woth the explore... ok and what the heck is this

http://www.oceanicflight815.com/

seating chart page way to much info to absorb but def. woth the explore…

]]> By: Anonymous http://hownow.brownpau.com/archives/2005/10/the-dharma-initiative-and-the-ba-gua#comment-3971 Anonymous Fri, 14 Oct 2005 02:01:23 +0000 http://dev.brownpau.com/wp/?p=2771#comment-3971 4 8 15 16 23 42 -- 4 (8 15) 16 - Flight 815. Any significance here? Just a thought. 4 8 15 16 23 42 — 4 (8 15) 16 – Flight 815. Any significance here? Just a thought.

]]>