Difference between revisions of "HELIOS"

From Game Detectives Wiki
Jump to: navigation, search
[checked revision][checked revision]
m
 
(83 intermediate revisions by 5 users not shown)
Line 1: Line 1:
{{WIP}}
 
 
{{argbox
 
{{argbox
 
| float      = right
 
| float      = right
| name        = DSCS III A3
+
| name        = HELIOS
 
| image      = File:Dscs.png
 
| image      = File:Dscs.png
 
| imagewidth  = 400
 
| imagewidth  = 400
 
| description = The Department of Defense has declassified access via uplink to the DSCS 3 satellite. Good Luck and Godspeed.
 
| description = The Department of Defense has declassified access via uplink to the DSCS 3 satellite. Good Luck and Godspeed.
| creator    = [http://www.aliceandsmith.com/ Alice & Smith]
+
| creator    = [http://www.aliceandsmith.com/ Alice & Smith] and [https://www.twitch.tv Twitch, Inc.]
 
| type        = Official
 
| type        = Official
| status      = Active
+
| status      = Completed
 
| discovered  = 2021-12-05
 
| discovered  = 2021-12-05
 +
| completed  = 2021-12-13
 
}}
 
}}
 
{{ArgHeader}}
 
{{ArgHeader}}
 
{{BackToTop}}
 
{{BackToTop}}
  
The DSCS III A3 ARG is an ongoing ARG by Alice & Smith. The initial trailhead notes that access that a US Department of Defense communications satellite has been authorized.
+
The HELIOS ARG, initially known as the DSCS-III-A3 ARG is an ongoing ARG produced by Alice & Smith in collaboration with Twitch, Inc which started on 5th December 2021. The initial trailhead informed players that access to a Department of Defense communication satellite was now authorized, with clues leading players to a stream where terminal commands led them deeper into an unknown complex.
 +
 
 +
{| class="wikitable"
 +
!colspan="2"|List of additional pages
 +
|-
 +
|[[DSCS/Helios_Terminal_Commands | List of Helios terminal commands and outputs]]
 +
|Repository of all Helios terminal commands and their associated outputs.
 +
|-
 +
|[[DSCS/Camera_Checks | Gallery of Helios camera checks]]
 +
|Repository of Helios camera check images.
 +
|}
  
 
__TOC__
 
__TOC__
  
==Day 1==
+
==Initial Discovery==
At 03:24 UTC on 2021-12-05, the Alice & Smith (A&S) Twitter account [https://twitter.com/aliceandsmith/status/1467333935457841154 tweeted] "WARNING - DSCS III A3 access has been authorized. Good Luck and Godspeed." with a link to the A&S Discord.
+
At 03:24 UTC on 2021-12-05, the Alice & Smith (A&S) Twitter account [https://twitter.com/aliceandsmith/status/1467333935457841154 tweeted] "WARNING - DSCS III A3 access has been authorized. Good Luck and Godspeed." with a link to the A&S Discord. DSCS III-A3, officially known as USA-167, is an active satellite that is part of the [https://en.wikipedia.org/wiki/Defense_Satellite_Communications_System Defense Satellite Communications System (DSCS)]. The DSCS forms part of the United States' military communication network, with DSCS III-A3 specifically being the penultimate launch of this constellation in March of 2003.
  
 
This was followed up at 17:05 UTC with a [https://twitter.com/aliceandsmith/status/1467540607790899216 second tweet] stating "UPDATES | Dec 5th | - DSCS III A3 IRC TOR uplink and RTMP FEED updated to version 636f-rev1.". The reference to an RTMP feed led players to a Twitch stream titled HELIOS Task Force on the [https://www.twitch.tv/DSCS_III_A3 dscs_iii_a3 channel].
 
This was followed up at 17:05 UTC with a [https://twitter.com/aliceandsmith/status/1467540607790899216 second tweet] stating "UPDATES | Dec 5th | - DSCS III A3 IRC TOR uplink and RTMP FEED updated to version 636f-rev1.". The reference to an RTMP feed led players to a Twitch stream titled HELIOS Task Force on the [https://www.twitch.tv/DSCS_III_A3 dscs_iii_a3 channel].
  
The stream contained an interactive terminal which users could enter commands into and get responses from. The initial terminal upon loading the stream was:
+
===Discovering the Stream===
 +
[[File:HELIOS-GSR-1-V2.png|thumb|The NOAA Weather Scale indicators as seen at the start of the ARG]]When players first connected to the stream they saw a hallway illuminated with occasionally flashing red lights and a large vault-like door at the end. On screen there was also a Data ID (UR-SRV-V.01 3333), the local time (which was UTC-8) and a status field which showed as "Offline". Finally, there were three green colored boxes with text inside each - G-1, S-1, and R-1. This was discovered slightly later in the ARG to be referring to the [https://www.swpc.noaa.gov/noaa-scales-explanation NOAA Space Weather Scales], a series of indicators for space weather conditions that can impact the health of satellites, communications, astronauts and the like. The scale ranges from 1 to 5 and with all three indicators at 1, the current conditions reported are all minor.
 +
 
 +
The stream contained an interactive terminal which users could enter [[DSCS/Helios_Terminal_Commands|commands]] into and get responses from. The initial terminal upon loading the stream was:
 
<pre>
 
<pre>
 
Setting hostid: 636f-rev1...
 
Setting hostid: 636f-rev1...
Line 36: Line 49:
 
Starting background file system check in 60 seconds
 
Starting background file system check in 60 seconds
 
</pre>
 
</pre>
 +
Clicking on the icon to the right of the stream for the Helios terminal popped up a Twitch window describing it. This included a note saying that the command <code>help</code> should be used to start.
  
Clicking on the icon to the right of the stream for the Helios terminal popped up a Twitch window describing it. This included a note saying that the command HELP should be used to start. Entering this into the terminal resulted in:
+
===Queries and Key Systems===
<pre>
+
Converting the hexadecimal code found by inputting the <code>version</code> command to text produced the message <code>command 'query' support = 1</code>. This new command, <code>query</code> could be confirmed by typing in <code>help query</code>, which in turn led to the discovery of the latest system inventory, <code>chks1029</code> which, when queried, returned a list of currently active modules:
Available commands:
 
  version
 
  coredump
 
  help
 
  <ACCESS DENIED>
 
  <ACCESS DENIED>
 
  <ACCESS DENIED>
 
Enter ‘help <command>’ for more information
 
</pre>
 
 
 
Typing in <code>help version</code> and <code>help coredump</code> resulted in the following:
 
<pre>
 
help version
 
Command help for: version
 
Displays the version details for DSCS_III_A3
 
 
 
help coredump
 
Command help for: coredump
 
Output a module's memory state
 
Enter ‘coredump <module>’ to execute
 
</pre>
 
 
 
Players then ran the version command, which gave them a hexadecimal code output.
 
<pre>
 
DSCS_III_A3 Version
 
63 6f 6d 6d 61 6e 64
 
20 27 71 75 65 72 79
 
27 20 73 75 70 70 6f
 
72 74 20 3d 20 31 00
 
</pre>
 
 
 
Converting the hexadecimal code to text produced the message '''command 'query' support = 1'''. This new command could be confirmed by typing in <code>help query</code>
 
 
 
<pre>
 
Command help for: query
 
Displays data relating to query subject
 
Enter ‘query <module>’ to check for system status
 
Latest system inventory: chks1029
 
</pre>
 
 
 
By querying the latest system inventory noted on the last line of the output, players received info regarding several key systems:
 
 
<pre>
 
<pre>
 
ERROR: chks1029 format type table
 
ERROR: chks1029 format type table
Line 95: Line 68:
 
</pre>
 
</pre>
  
Attempting to query most of the provided ID numbers would result in unknown commands, however entering <code>query 31575</code> would output:
+
==Factory Main Door==
 +
When attempting to use the IDs from <code>chks1029</code> as a part of other commands, players found that the only entry that would return anything was 31575 - the Factory Main Door. The command <code>query 31575</code> informed players that there was a command to both open and close the door, however an access code was required. The command <code>coredump 31575</code> provided a list of 9 individual coredump pages with various details scattered throughout.
 +
 
 +
===Arranging the Grid===
 +
Players quickly identified that pages 1, 4, and 8 were of the same format and were likely related to the hint in the <code>coredump 31575</code> command of '''180 entries / GRID 20 by 9'''. With 9 blocks of data, each containing 4 lines of 5 numbers, players ended up re-arranging the numbers such that a single block would form one column of the eventual grid, with numbers transposed in order (left-to-right, top-to-bottom). e.g.:
 +
 
 
<pre>
 
<pre>
Query Module 31575
+
666 242 355
Status Request - Factory Main Door
+
576 483 559
Authorized commands:
 
  execute 31575 -open -<door access code>
 
  execute 31575 -close -<door access code>
 
Please stand by...
 
Module Status: Online
 
 
</pre>
 
</pre>
  
Players who ran the command <code>coredump 31575</code> would be provided with a list of 9 pages of data to sort through.
+
would become
 +
 
 
<pre>
 
<pre>
WARNING: memory coredump for 31575
+
666
Generating files...
+
242
180 entries / GRID 20 by 9
+
355
  coredump -read 31575.page1
+
576
  coredump -read 31575.page2
+
483
  coredump -read 31575.page3
+
559
  coredump -read 31575.page4
 
  coredump -read 31575.page5
 
  coredump -read 31575.page6
 
  coredump -read 31575.page7
 
  coredump -read 31575.page8
 
  coredump -read 31575.page9
 
Process successful
 
 
</pre>
 
</pre>
  
Entering these commands into the terminal would provide the data detailed below.
+
By ordering the numbers in this manner, and ordering the columns according to the block numbers (1 on the left and increasing to 9 on the right), players had a complete grid that they began to investigate how to decode.
  
===Coredump 31575 Pages===
+
===Distorted Audio Message===
  
'''Page 1''' provided three "blocks" of three-number digits, each arranged in a 5x4 grid.
+
Around 00:30 UTC on 2021-12-06, those listening to the stream heard a [https://clips.twitch.tv/TriangularBraveShieldAsianGlow-nNzzB6eOQr-eeHBg distorted audio file] play instead of the usual background track, and around 30 minutes later, was discovered to have updated from showing nothing, to now referencing the completion of an audio frequency render (presumed to be related to the distorted audio file slightly before).
<pre>
+
 
Memory Coredump PAGE 1
+
The audio file was inspected and found to contain distinct two distinct sounds, a high pitched "sonar ping"-like sound and a deep bass sound. By looking at the number of bass sounds in a row and splitting them into groups using the high pitched sound as a delimiter, players found the numbers 2, 3, 5 and 8. These numbers correspond to the 3rd through 6th numbers in the Fibonacci sequence. While players had already been suspecting there was some sort of manipulating of filtering, the large block of numbers and this file was related, it was not possible to correlate the two at the time.
Module 31575
 
Block 1
 
  666 242 355 398 456
 
  576 483 559 374 416
 
  515 424 363 672 533
 
  273 482 302 216 484
 
Block 2
 
  105 101 497 171 408
 
  277 473 691 457 239
 
  607 368 971 450 528
 
  472 174 435 467 508
 
Block 3
 
  258 599 225 202 857
 
  519 447 317 206 614
 
  516 364 582 461 121
 
  279 476 383 123 526
 
[End of file]
 
</pre>
 
  
'''Page 2''' provided a list of colored books, seen below, with years as file extensions. The use of these "books" and years is currently unknown.
+
At around 03:30 UTC a message was posted in chat by the DSCS_III_A3 channel which notified players that there was an "error" and "repo diff ---p3-raw-AUDIO_RENDER +++p3-clean_AUDIO_RENDER. diff files analysis IS required". In plain English, this message indicated to players that the original "raw" audio file was replaced with a new, "clean" one, and that the new file will need to be analyzed.
<pre>
 
Memory Coredump PAGE 2
 
Module 31575
 
Blue book repo /repo/bb
 
/1955
 
/1958
 
/1961
 
/1969
 
Yellow book repo /repo/yb
 
/1971
 
/1976
 
/1980
 
Red book repo /repo/rb
 
/1982
 
/1983
 
/1985
 
/1991
 
/1993
 
/1996
 
/1997
 
Green book repo /repo/gb
 
  File access denied
 
[End of file]
 
</pre>
 
  
'''Page 3''' initially provided nothing, until some time estimated around 01:00 UTC, when it would update to read the following.
+
[[File:Key.png|thumb|270px|link=|right|The substituted grid on it's side, forming the word KEY.]]
<pre>
 
Memory Coredump PAGE 3
 
Module 31575
 
Audio Frenquency Render Completed
 
12-05-2021-16h17m28s
 
[End of file]
 
</pre>
 
  
'''Page 4''' provided another set of three number "blocks", just as Page 1 did.
+
===Decoding the Grid===
<pre>
 
Memory Coredump PAGE 4
 
Module 31575
 
Block 4
 
  303 631 747 421 333
 
  196 562 401 219 458
 
  170 711 134 644 307
 
  556 593 369 585 608
 
Block 5
 
  362 853 953 471 594
 
  404 422 643 809 863
 
  600 427 475 345 566
 
  677 124 445 496 418
 
Block 6
 
  145 757 448 659 394
 
  520 715 617 624 162
 
  500 361 265 532 518
 
  919 178 480 667 495
 
[End of file]
 
</pre>
 
  
'''Page 5''' provided a unique encrypted text detailed below.
+
Upon listening to the file, or viewing the waveform of the audio file, players noticed that the final bass tone was removed, changing the sequence to now be 2,3,5,7. This meant it was no longer part of the Fibonacci sequence but instead they were the first 4 Prime numbers. By reviewing the 20 by 9 block of numbers, and replacing all of the non-prime numbers with 0, while all of the prime numbers are changed to 1, before rotating the grid 90 degrees counter-clockwise, the arrangement of prime numbers spelled out the word '''key'''.
<pre>
 
Memory Coredump PAGE 5
 
Module 31575
 
Buffer Available
 
  7e 20 38
 
  20 64 61
 
  79 73 20
 
  74 6f 20
 
  45 4c 45
 
[End of file]
 
</pre>
 
  
Decoded, the hexadecimal string read <code> ~ 8 days to ELE </code>. "ELE" is currently believed to stand for '''"Extinction Level Event"'''.
+
With this keyword, players were able to enter the command <code>execute 31575 -open -key</code> into the terminal. Upon entering the command, players received the following confirmation:
  
'''Page 6''' provided five IRC/RTMP addresses, detailed below. The purpose of these addresses are currently unknown.
+
[[File:HELIOS-GSR-2.png|thumb|The NOAA Space Weather Index after door keys began to be entered]]
<pre>
+
[[File:HELIOS-GSR-3.png|thumb|The NOAA Space Weather Index after the door opened]]
Memory Coredump PAGE 6
 
Module 31575
 
OPEN SOCKET
 
  14321535.relay.nsa.sgov
 
  14154789.relay.defense.sgov
 
  14545787.relay.nevada.intelink.sgov
 
  14998541.relay.rtmp.twitch.tv
 
  14516555.relay--DVB-TEXT-IRC/.onion
 
[End of file]
 
</pre>
 
  
'''Page 7''' initially returned empty, but between the 100th and 200th command entry, updated to say the following.
 
 
<pre>
 
<pre>
Memory Coredump PAGE 7
+
Accessing local PGP Key
Module 31575
+
/home/31337/.ssh/31575
Unable to terminate process
+
Access authorized
RTMP Feed interference
+
Requests received so far: 0
Calibration required
+
Connecting to module 31575
  CLIPID #1 : <url not found>
+
TAK1 - Valid
  CLIPID #2 : <url not found>
+
TAK6 - Valid
  CLIPID #3 : <url not found>
+
BGD8 - Valid
  CLIPID #4 : <url not found>
+
DTB3 - Valid
  CLIPID #5 : <url not found>
+
SDD4 - Valid
  CLIPID #6 : <url not found>
+
Adding your entry, please wait...
  CLIPID #7 : <url not found>
+
Process completed.
  CLIPID #8 : <url not found>
 
Query database 75998 via relay 75879 when ready
 
[End of file]
 
</pre>
 
At the same time of Page 7 updating, the intro message updated to Revision 4, with a new warning:
 
<pre>
 
WARNING: System status set to 'hibernate'
 
Restore Point: 12-07-2021 16:00 Local Time
 
All process still operational
 
 
</pre>
 
</pre>
  
'''Page 8''' provided the third and final set of number boxes. These three sets of number boxes would soon be used to solve the first proper puzzle.
+
Individually there was no significant change for each single player, however as time progressed and more players entered the code, status updates were provided in chat indicating how many more entries were still needed. Initially this was 25, then 50, then 100 before finally 200. As each goal was reached, a glowing ring expanded until it encircled the door. Additionally, as goals were reached, new camera feeds were revealed and occasionally cycled through, showing other areas of the facility beyond the main door and that players would soon need to be working on. Players also noticed that after commands started to be sent to open the door, the NOAA Space Weather Index in the bottom rght had changed to indicate S-2 (or Moderate Solar Radiation Storms).
<pre>
 
Memory Coredump PAGE 8
 
Module 31575
 
Block 7
 
  249 937 708 423 439
 
  184 474 701 650 712
 
  615 746 606 148 511
 
  563 567 713 132 635
 
Block 8
 
  260 137 381 255 696
 
  347 649 313 601 751
 
  353 459 228 580 574
 
  257 692 404 632 136
 
Block 9
 
  399 561 190 238 295
 
  116 512 545 375 454
 
  460 354 534 517 477
 
  308 725 430 540 999
 
[End of file]
 
</pre>
 
  
'''Page 9''' provided a status screen of the satellite, detailed below. As of the first ~10 hours of the ARG, it read the following.
+
At 11:35 UTC on 2021-12-07, the 200th command to open the door was sent, and [https://www.youtube.com/watch?v=d2iuCMnXZAo the door opened]. At the same time, the NOAA Space Weather Index updated again to now show S-3 and R-2 (Strong Solar Radiation Storms and Moderate Radio Blackouts)
<pre> Memory Coredump PAGE 9
 
Module 31575
 
STATUS
 
  dscs_iii_a3  | access granted
 
  Control Door  | awaiting command
 
  Station 1    | booting ~ 24h
 
  Control Room  | access denied
 
[End of file]
 
</pre>
 
Should this change, the changes will be documented.
 
  
===Module 31575 - Factory Door Solve===
+
==Security Terminal==
  
Following some hours of nothingness, players began to notice quirks within the livestream's audio. A series of sharp and deep tones would continuously repeat, to which players began to document.
+
On 2021-12-08, at 00:00 UTC, or 16:00 Stream Local Time, another revision was announced to the terminal program bringing it up to revision 5. This revision enabled the coredump and query commands to be used on module 25798 - Security Terminal.
  
The series would play <code> Sharp, Two Deep, Sharp, Three Deep, Sharp, Five Deep, Sharp, Seven Deep, Three Sharp</code>. The series would then repeat.
+
On <code>query 25798</code> being used in the Helios terminal on the stream, it outputted two commands to be used on module 25798. The security terminal required two different inputs to be executed on it: registering a UID, and committing a branchid. These ID numbers were to be solved for, using the information obtained from using <code>coredump 25798</code>. On execution of the command, 5 files were generated that could be read along with the line <code>5 entries / 10 digits ID</code>, which seemed to indicate that a 10 digit ID number was required for this terminal. Each coredump file generated had its own clues, that once investigated, seemed to point towards different satellites that had been launched into space. At the time of the security terminal activating, however, the significance of the satellites was not yet clear to players, and while several inputs were attempted based on the information of the satellites, no valid entries were uncovered.
  
A keen-eared player noticed the tones corresponded to the first four numerical prime numbers, Two, Three, Five, and Seven. Using the "blocks" provided by the coredump pages 1, 4, and 8, a central superblock was formed utilizing earlier information from the initial coredump command, stating a "20x9 grid". Within this grid, substituting all '''non-prime''' numbers for zeroes, and all '''prime''' numbers for ones, a grid of zeroes and ones was formed, and when turned to it's side, spelled the word <code>KEY</code>.
+
[[File:DSCS Security Terminal page 1 image clue.jpg|thumb|150px|The image from the third fragment URL of page 1 coredump]]
[[File:Key.png|frame|caption|700px|link=|right|The substituted grid on it's side, forming the word KEY.]]
 
  
 +
On 2021-12-8, at approximately 8:30 PM UTC, or 12:30 Stream Local Time, the terminal program had another revision bringing it up to Revision 6. This brought the CSR (Clippy SubRoutine) subroutine online, but is simply called <code>clippy</code> in the terminal commands. On using <code>query clippy</code>, a command is listed to read various pages of its help message database, where it appears to be helping an unknown individual. Amongst these pages was mention that space objects tracked by NORAD are registered with their own unique SATCAT, or Satellite Catalog, number. With this information, the SATCAT numbers of the satellites, identified with the coredump information, were used as the UID number for the <code>execute 25798 -register -<UID></code> command. These returned valid entries, which outputted two-digit branch sequences for each of the 5 satellites. When all the branch sequences were arranged in order, it produced a 10 digit code that could be inputted using the <code>execute 25798 -commit -<branchid></code> command. The method of solving the UIDs and branchid are detailed below.
  
 +
===Page 1 Coredump Solution===
  
 +
On reading the page 1 coredump in the terminal, three block fragments were produced that had different clues on them:
 +
# Aug
 +
# 134
 +
# data.dscsiii-a3.directory/31zCVhu
  
 +
[[File:DSCS Security Terminal page 4 image clue 1.jpg|thumb|150px|The image from the 1st fragment URL of the page 4 coredump]]
 +
[[File:DSCS Security Terminal page 4 image clue 2.jpg|thumb|150px|The image from the 2nd fragment URL of the page 4 coredump]]
  
 +
[https://terminal.dscsiii-a3.directory/datadump/25798/0110321154.jpg The third fragment's URL,] when put into a browser, linked to an image of the Thor's Fight with the Giants painting. Combining Thor with the other information lead to the [https://en.wikipedia.org/wiki/Thor-Able/ Thor-able] expendable rocket launch system. In August, this system was used to launch one satellite on vehicle 134, [https://en.wikipedia.org/wiki/Explorer_6/ Explorer 6]. Explorer 6's SATCAT number is 00015, which when inputted into the Helios Terminal using <code>execute 25798 -register -00015</code>, would yield the result of <code>BranchSequence_01(a4)</code>, leading to a4 being the first digits of the branchid.
  
 +
===Page 2 Coredump Solution===
  
 +
On reading the page 2 coredump in the terminal, only one block fragment was produced with the words "Little Arrow". Little Arrow, when translated into Russian, yields the name Strelka, the name of one of the dogs aboard the [https://en.wikipedia.org/wiki/Korabl-Sputnik_2/ Sputnik 5 satellite]. Inputting Sputnik 5's SATCAT number, 00055, into the terminal using <code>execute 25798 -register -00055</code> yields the result of <code>BranchSequence_02(g7)</code> leading g7 to be the next 2 digits of the branchid.
  
 +
===Page 3 Coredump Solution===
  
 +
On reading the page 3 coredump in the terminal, only one block fragment was produced with the words "92 TJ". TJ is the abbreviation for Tera Joules, a method of measuring explosive yields, with values this high often being seen only in nuclear weapons. 92 TJ can be applied to several different nuclear weapons but in keeping with the satellite theme only one really matches, [https://en.wikipedia.org/wiki/Project_596/ China's Project 596] which was part of the [https://en.wikipedia.org/wiki/Two_Bombs,_One_Satellite/ Two Bombs, One Satellite] project. The satellite in question was the [https://en.wikipedia.org/wiki/Dong_Fang_Hong_I/ Dong Fang Hong I] or also known as China 1 which has the SATCAT number of 04382. When inputted into the terminal using <code>execute 25798 -register -04382</code> it outputs the result of <code>BranchSequence_03(x9)</code> leading x9 to be the next two digits of the branchid.
  
 +
===Page 4 Coredump Solution===
  
 +
On reading the page 4 coredump in the terminal, two block fragments were produced that had different clues on them:
 +
# data.dscsiii-a3.directory/3dzEo9L
 +
# data.dscsiii-a3.directory/3y4KyIo
  
 +
As with the page 1 coredump image, these URLs also link to images: [https://terminal.dscsiii-a3.directory/datadump/25798/0254578.jpg/ Image 1] & [https://terminal.dscsiii-a3.directory/datadump/25798/0254579.jpg/ Image 2]. The first image is a logo for [https://en.wikipedia.org/wiki/Interkosmos/ Interkosmos], the space program for the Soviet Union. The second image is a cropped-out piece of the [https://en.wikipedia.org/wiki/The_School_of_Athens/ School of Athens fresco] which in particular is focused on Euclid. When comparing the two, no satellites launched by Interkosmos bore the name Euclid nor was Greece even involved in the program. When probing deeper with the Euclid algorithm and the countries that were part of the Interkosmos program you find there was a similar algorithm devised by an Indian astronomer called [https://en.wikipedia.org/wiki/Aryabhata/ Aryabhata] and which has a [https://en.wikipedia.org/wiki/Aryabhata_(satellite)/ satellite] named after that was launched in the Interkosmos program. When inputting this satellite's SATCAT number into the terminal using <code>execute 25798 -register -07752</code> it yields the result of <code>BranchSequence_04(c1)</code> which are the next two digits of the branchid.
  
 +
[[File:DSCS Security Terminal Solved Camera.jpg|thumb|300px|Camera view once the security terminal terminal was completed]]
  
 +
===Page 5 Coredump Solution===
  
 +
On reading the page 5 coredump in the terminal, only one block fragment was produced with the number "243". Searching the number with respect to space finds that Venus has a rotational period of 243 earth days. While there is several artificial satellites in relation to Venus the one with distinction is [https://en.wikipedia.org/wiki/Venera_7/ Venera 7] which was the first one to soft-land on Venus and transmit data back to Earth. Inputting its SATCAT number into the terminal using <code>execute 25798 -register -04489</code> yields the result of <code>BranchSequence_05(d7)</code> which are the last digits of the branchid.
  
 +
===25798 Solution===
  
The solve led to the completion of the command <code>execute 31575 -open -key</code>, which, when entered, would return the following.
+
When all the branch sequences are arranged in order, it yields a 10 digit id number of <code>a4g7x9c1d7</code> which can be inputted in the terminal using <code>execute 25798 -commit -a4g7x9c1d7</code> and yielded the result of adding your entry to the terminal. Once 100 entries in total were collected from unique twitch ids, the hallway lights turned green and the broadcast was interrupted by a moving graphic that repeated a string of numbers and letters. Once this was over, the terminal was updated with access granted to the Main Control Room.
<pre>
 
Accessing local PGP Key
 
/home/31337/.ssh/31575
 
Access authorized
 
Requests received so far: 0
 
Connecting to module 31575
 
TAK1 - Valid
 
TAK6 - Valid
 
BGD8 - Valid
 
DTB3 - Valid
 
SDD4 - Valid
 
Adding your entry, please wait...
 
Process completed.
 
</pre>
 
  
Note the line which says '''Requests received so far: 0'''. This is what was returned upon the first entry of the command, with every subsequent unique entry counting up by one. At 25, 50, 75, and 100 entries, a routine camera check would be initiated, showing more of the facility to the livestream. These four camera checks each revealed new areas of the facility. When the final goal of 200 entries was reached at 11:35 UTC, the [https://www.youtube.com/watch?v=d2iuCMnXZAo factory door seen on the livestream opened.]
+
==Main Control Room==
  
==Day 3==
+
===Query & Coredump 75879===
  
On 2021-12-7, at 12:00 AM UTC, or 16:00 Local Time on the livestream, the second module, Module 25798 - Security Terminal became available, along with new commands relating to the new module, as well as updates to old commands.
+
The third module began with the discovery of only two commands linked to it, being the frequently used query and coredump commands.
  
'''Page 9''' of the Factory Door coredump, the status page, had updated to read the following.
+
Entering [https://wiki.gamedetectives.net/index.php?title=HELIOS/Helios_Terminal_Commands#query_75879 <code>query 75879</code>] would return differently than the other query commands have, reading the following.
 
<pre>
 
<pre>
Module 31575
+
Query Module 75879
STATUS
+
Status Request - Main Control Room
  dscs_iii_a3  | access granted
+
Authorized commands:
   Control Door  | access granted
+
   Unavailable
   Station 1    | access granted
+
   Unavailable
  Control Room  | access denied
+
Please stand by...
[End of file]
+
Module Status: Offline
 
</pre>
 
</pre>
  
The first of the new commands was <code>query 25798</code>, which set the frame for the second puzzle. When entered, it would return a new set of available execute commands, seen below.
+
Players then entered [https://wiki.gamedetectives.net/index.php?title=HELIOS/Helios_Terminal_Commands#coredump_75879 <code>coredump 75879</code>], returning a reference to the first module, and a list of links.
 
<pre>
 
<pre>
Query Module 25798
+
WARNING: memory coredump for 75879
Status Request - Security Terminal
+
Generating files...
Authorized commands:
+
Error, Data Integrity Failed
   execute 25798 -register -<UID>
+
Missing reference on 31575.page7
   execute 25798 -commit -<branchid>
+
Tracking sequence started...
Please stand by...
+
  FOUND: data.dscsiii-a3.directory/3lL5XkY
Module Status: Online
+
  FOUND: data.dscsiii-a3.directory/3EGivlb
 +
   FOUND: data.dscsiii-a3.directory/3pLvv2W
 +
  FOUND: data.dscsiii-a3.directory/3EDZnEu
 +
   FOUND: data.dscsiii-a3.directory/3GsEHQs
 +
  FOUND: data.dscsiii-a3.directory/3IAbAMX
 +
  FOUND: <error>
 +
Missing data
 +
Scan schedule: Every 4h
 +
Process Failed
 
</pre>
 
</pre>
  
The second of the new commands was 5 new pages of coredump information, accessed using <code>coredump 25798</code>, returning a new set of 5 pages, detailed below, and a line reading <code>5 entries / 10 digits ID</code>. Players suspected this to be vital to the construction of the solution as it had been in the previous puzzle, relating to the grids.
+
The six links all redirect to twitch clips, each from seemingly normal streamers being interrupted by a similar visual & sequences of numbers as the main livestream had been.
  
===Coredump 25798 Pages===
+
Later the next day, two more clips were added: <code>data.dscsiii-a3.directory/31FOELm</code>, and <code>data.dscsiii-a3.directory/3dyTMTY</code>. The command also updated to say <code>Pattern Detected: DSCS.III-A3.Authorization.XXXXXXX</code> near the bottom, providing the format for the next solution. A [https://clips.twitch.tv/WonderfulWildLemurOMGScoots-2YV67Os9-Jll9Xe1 ninth clip] occurred during Twitch Gaming's pre-show for The Game Awards 2021, at 12:17 AM UTC, and a [https://clips.twitch.tv/ShySteamyJaguarTF2John-gU31JyKIbQfQmrN6 tenth] during the post-show at 4:21 AM UTC. The day after that, [https://clips.twitch.tv/AnimatedDistinctAlfalfaFutureMan-VaMqBUX8z-oLrZVz an eleventh] occurred during Twitch Gaming's winter gathering livestream at 8:38 PM UTC.
  
'''Page 1''' provided the first block fragments of cryptic information to be used in solving the second puzzle, detailed below.
+
===Grid Power Distribution===
<pre>
+
 
Memory Coredump PAGE 1
+
At 21:03 UTC on 2021-12-10 the stream updated to focus on a batch of terminals with different values listed on them. In addition, the terminal initialization text updated to Revision 10, and players who re-ran the [https://wiki.gamedetectives.net/index.php?title=HELIOS/Helios_Terminal_Commands#query_75879 <code>query 75879</code>] command were directed to use the new <code>grid</code> command.
Module 25798
+
[[File:helios-grid.png|thumb|The stream view while working on the grid puzzle, showing the three batches of terminals (left, center and right) and the up/down arrows of light above the central screens]]
Block Fragment
+
The initial command used, [https://wiki.gamedetectives.net/index.php?title=HELIOS/Helios_Terminal_Commands#Grid_-status <code>grid status</code>], informed players that there are three grid IDs, 33, 66 and 99 which need power distributed to them. This could be delivered in batches of either 10, 100 or 1000 megawatts, but would require collaboration with other users to apply. Specifically, the system required 2 users to wake the system and make it ready to accept commands (this was seen with a blue screen), a further 3 users to prepare the signal (resulting in a yellow screen on the terminals) and then another 5 users to commit the power increase (confirmed by a red screen with the word COMMIT over the top). The 10 users required to commit a power increase had to be unique within that set, however once a command was committed, the same 10 users could then submit a new command (i.e. 10 users could add 100 power, then once done they could add another 100 without needing anyone extra). The final part of the [https://wiki.gamedetectives.net/index.php?title=HELIOS/Helios_Terminal_Commands#Grid_-status <code>grid status</code>] command warned players that the system was unstable, and that the system would recycle regularly. Initially, this was a 5 minute reset cycle (as described by the CRON expression */5 * * * *)
  -01: Aug
+
 
  -02: 134
+
Players initially started adding power to different grid IDs to try and find the right value, however progress was frequently reset without identifying a particular value. After some time, players noticed that when increasing a particular grid IDs power too far, the white light above one of the screens turns red and the red light below turns white. These lights formed arrows pointing up and down and players soon realized that these indicated if the current power value was too low (with the light above and arrow pointing down) or too high (light below and arrow pointing up).
  -03: data.dscsiii-a3.directory/31zCVhu
+
 
[End of file]
+
With this new information, players gradually stepped through power increments and, upon exceeding the desired value, resetting and then stepping through a range with lower increments (i.e. increasing by 1000 increments - 0,1000,2000,3000, reset when it's too high - then use 100 increments for the section before it swapped - 0,1000,2000,2100,2200). Using this method, players slowly worked through and identified the three correct power levels with ID 33 being '''2200MW''', ID 66 being '''12000MW''' and ID 99 being '''40100MW'''.
</pre>
+
 
 +
==HELIOS OS Activation==
 +
 
 +
At around 02:20 UTC on 2021-12-11, all grids were stabilized, and shutters opened allowing a view out to the Lights Out Factory with 4 portals which soon activated. At the same time, the [https://www.twitch.tv/twitchgaming Twitch Gaming] channel was just finishing up one of it's awards shows and during the end card, 3 slides of text were shown with an emergency alert tone playing instead of the usual background music. The slides informed players that:
 +
[[File:helios-portals.png|thumb|The portal-like structures that activated in the Lights Out Factory]]
 +
<blockquote>
 +
''Following the prediction of a solar flare with a coronal mass ejection (CME) 20 times bigger than the Carrington Event of 1859, the Department of Defence is      declaring a global state of emergency. Projections show that this event will happen on 2021-12-12 at 21:00 PST and will take 17 hours to reach Earth.''
  
The link in this set of data is a valid image link, and leads to a classical painting of [https://terminal.dscsiii-a3.directory/datadump/25798/0110321154.jpg Thor's Fight with the Giants.]
+
''Government resources are now considered insufficient, immediate citizen contribution is required. The HELIOS Task Force has been re-activated in response to this global threat. Distributed computing effort is required through the livestream platform designation : TWITCH.''
  
 +
''Agents, the RAMPART Initiative is now live.''
 +
</blockquote>
  
'''Page 2''' returned the following.
+
At the end of the Twitch Gaming Awards stream, the channel started a raid on the HELIOS channel which directed ~50,000 viewers to the channel.
<pre>
 
Memory Coredump PAGE 2
 
Module 25798
 
Block Fragment
 
  -01: Little Arrow
 
[End of file]
 
</pre>
 
  
'''Page 3''' returned similarly little:
+
Finally, the HELIOS terminal upgraded to a full HELIOS OS, providing players with the ability to view their profile (including achievements), view collected resources, a timeline, a list of streamers who had integrated the HELIOS OS with their stream and a new and upgraded terminal window (none of the old commands carried over to this new one).
<pre>
+
[[File:helios-ship.png|thumb|The holographic display of the ship that players worked to create]]
Memory Coredump PAGE 3
+
The purpose of the HELIOS OS and the overall RAMPART Initiative was to have the community collect resources, send them to streamers who were running the HELIOS OS extension (thereby acting as resource pools) and contributing to the overall mission to prevent the effects of the solar flare. Streamers could choose specific missions to focus on (such as boosters or a command module) with traded resources from players being directed towards that mission objective. Additionally, becoming a HELIOS OS Streamer would prevent that individual from receiving the regular raw material allocation that regular players received automatically (such materials being refined and then sent to streamers of their choice, thus providing a constant steady flow of resources around the community).
Module 25798
 
Block Fragment
 
  -01: 92 TJ
 
[End of file]
 
</pre>
 
  
'''Page 4''' provided links to two more images, the first, [https://terminal.dscsiii-a3.directory/datadump/25798/0254578.jpg the logo for the Soviet space program ''Interkosmos''], and the second, [https://terminal.dscsiii-a3.directory/datadump/25798/0254579.jpg a crop of fresco ''The School of Athens''.]
+
Below is a list of all of the materials players received to send to streamers, who would make the components for missions.
<pre>
 
Memory Coredump PAGE 4
 
Module 25798
 
Block Fragment
 
  -01: data.dscsiii-a3.directory/3dzEo9L
 
  -02: data.dscsiii-a3.directory/3y4KyIo
 
[End of file]
 
</pre>
 
  
'''Page 5''' ended the set of data with a seemingly ominous message, simply reading <code>-01: 243 days [End of file]</code>
+
{| class="mw-collapsible mw-collapsed wikitable"
 +
|+ style=white-space:nowrap | Raw Materials List
 +
|-
 +
! scope="row"|  Common
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Al-black.png|frameless|100px]]Aluminium
 +
| scope="row" align="center"| [[File:HELIOS-Raw-C-black.png|frameless|100px]]Carbon
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Fe-black.png|frameless|100px]]Iron
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Py-black.png|frameless|100px]]Polymers
 +
|-
 +
! scope="row"| Uncommon
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Zn-black.png|frameless|100px]]Zinc
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Cu-black.png|frameless|100px]]Copper
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Li-black.png|frameless|100px]]Lithium
 +
|-
 +
! scope="row"| Rare
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Ti-black.png|frameless|100px]]Titanium
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Cr-black.png|frameless|100px]]Chrome
 +
|-
 +
! scope="row"| Epic
 +
| scope="row" align="center"| [[File:HELIOS-Raw-G-black.png|frameless|100px]]Gold
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Gm-black.png|frameless|100px]]Gamium
 +
|-
 +
! scope="row"| Mythic
 +
| scope="row" align="center"| [[File:HELIOS-Raw-Tw-black.png|frameless|100px]]Twitchitrium
 +
|}
  
===Module 25798 - Security Terminal Solve===
+
{| class="mw-collapsible mw-collapsed wikitable"
 +
|+ style=white-space:nowrap | Refined Materials List
 +
|-
 +
! scope="row" colspan="6"| Common
 +
|-
 +
! scope="col"| Refined Material
 +
! scope="row" colspan="4"| Required Raw Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Steel-black.png|frameless|100px]]Steel
 +
| scope="row"| [[File:HELIOS-Raw-Fe-black.png|frameless|100px]]5 x Iron
 +
| scope="row"| [[File:HELIOS-Raw-C-black.png|frameless|100px]]5 x Carbon
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Liquid_Tank-black.png|frameless|100px]]Liquid Tank
 +
| scope="row"| [[File:HELIOS-Raw-C-black.png|frameless|100px]]3 x Carbon
 +
| scope="row"| [[File:HELIOS-Raw-Al-black.png|frameless|100px]]5 x Aluminium
 +
| scope="row"| [[File:HELIOS-Raw-Fe-black.png|frameless|100px]]2 x Iron
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Carbon_Fiber-black.png|frameless|100px]]Carbon Fiber
 +
| scope="row"| [[File:HELIOS-Raw-Py-black.png|frameless|100px]]2 x Polymers
 +
| scope="row"| [[File:HELIOS-Raw-C-black.png|frameless|100px]]4 x Carbon
 +
|-
 +
! scope="row" colspan="6"| Uncommon
 +
|-
 +
! scope="col"| Refined Material
 +
! scope="row" colspan="4"| Required Raw Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Coils-black.png|frameless|100px]]Coils
 +
| scope="row"| [[File:HELIOS-Raw-Fe-black.png|frameless|100px]]3 x Iron
 +
| scope="row"| [[File:HELIOS-Raw-Cu-black.png|frameless|100px]]3 x Copper
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Zinc_Crystal-black.png|frameless|100px]]Zinc Crystal
 +
| scope="row"| [[File:HELIOS-Raw-C-black.png|frameless|100px]]2 x Carbon
 +
| scope="row"| [[File:HELIOS-Raw-Zn-black.png|frameless|100px]]5 x Zinc
 +
|-
 +
! scope="row" colspan="6"| Rare
 +
|-
 +
! scope="col"| Refined Material
 +
! scope="row" colspan="4"| Required Raw Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Turbine_Pump-black.png|frameless|100px]]Turbine Pump
 +
| scope="row"| [[File:HELIOS-Raw-Al-black.png|frameless|100px]]3 x Aluminium
 +
| scope="row"| [[File:HELIOS-Raw-Ti-black.png|frameless|100px]]4 x Titanium
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Circuit_Board-black.png|frameless|100px]]Circuit Board
 +
| scope="row"| [[File:HELIOS-Raw-Py-black.png|frameless|100px]]1 x Polymers
 +
| scope="row"| [[File:HELIOS-Raw-Cu-black.png|frameless|100px]]3 x Copper
 +
| scope="row"| [[File:HELIOS-Raw-Cr-black.png|frameless|100px]]1 x Chrome
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Battery-black.png|frameless|100px]]Battery
 +
| scope="row"| [[File:HELIOS-Raw-Py-black.png|frameless|100px]]4 x Polymers
 +
| scope="row"| [[File:HELIOS-Raw-Li-black.png|frameless|100px]]2 x Lithium
 +
| scope="row"| [[File:HELIOS-Raw-Cr-black.png|frameless|100px]]2 x Chrome
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Vibrasteel-black.png|frameless|100px]]Vibrasteel
 +
| scope="row"| [[File:HELIOS-Raw-Fe-black.png|frameless|100px]]5 x Iron
 +
| scope="row"| [[File:HELIOS-Raw-Ti-black.png|frameless|100px]]3 x Titanium
 +
| scope="row"| [[File:HELIOS-Raw-Cr-black.png|frameless|100px]]2 x Chrome
 +
|-
 +
! scope="row" colspan="6"| Epic
 +
|-
 +
! scope="col"| Refined Material
 +
! scope="row" colspan="4"| Required Raw Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Structulite_Plates-black.png|frameless|100px]]Structulite Plates
 +
| scope="row"| [[File:HELIOS-Raw-Al-black.png|frameless|100px]]4 x Aluminium
 +
| scope="row"| [[File:HELIOS-Raw-Zn-black.png|frameless|100px]]3 x Zinc
 +
| scope="row"| [[File:HELIOS-Raw-G-black.png|frameless|100px]]1 x Gold
 +
| scope="row"| [[File:HELIOS-Raw-Gm-black.png|frameless|100px]]1 x Gamium
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Microchips-black.png|frameless|100px]]Microchips
 +
| scope="row"| [[File:HELIOS-Raw-Py-black.png|frameless|100px]]4 x Polymers
 +
| scope="row"| [[File:HELIOS-Raw-G-black.png|frameless|100px]]1 x Gold
 +
|-
 +
! scope="row" colspan="6"| Mythic
 +
|-
 +
! scope="col"| Refined Material
 +
! scope="row" colspan="4"| Required Raw Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Refined-Barrier_Catalyst-black.png|frameless|100px]]Barrier Catalyst
 +
| scope="row"| [[File:HELIOS-Raw-Ti-black.png|frameless|100px]]3 x Titanium
 +
| scope="row"| [[File:HELIOS-Raw-Gm-black.png|frameless|100px]]4 x Gamium
 +
| scope="row"| [[File:HELIOS-Raw-Tw-black.png|frameless|100px]]5 x Twitchitrium
 +
|}
  
Following a set of hints from the Clippy Database, players learned the solution dealt with Satellite Catalog Numbers, or '''SATCATs''' for short, which were to be entered as the "UIDs", and would, when entered, give two characters and what order of sequence the characters were, leading to the second part of the puzzle, the "branchid".
+
{| class="mw-collapsible mw-collapsed wikitable"
 +
|+ style=white-space:nowrap | Components List
 +
|-
 +
! scope="row" colspan="6"| Common
 +
|-
 +
! scope="col"| Component
 +
! scope="row" colspan="4"| Required Refined Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Propellant_Tank-black.png|frameless|100px]]Propellant Tank
 +
| scope="row"| [[File:HELIOS-Refined-Liquid_Tank-black.png|frameless|100px]]3 x Liquid Tank
 +
| scope="row"| [[File:HELIOS-Refined-Steel-black.png|frameless|100px]]4 x Steel
 +
|-
 +
! scope="row" colspan="6"| Uncommon
 +
|-
 +
! scope="col"| Component
 +
! scope="row" colspan="4"| Required Refined Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Fuel_Pipes-black.png|frameless|100px]]Fuel Pipes
 +
| scope="row"| [[File:HELIOS-Refined-Liquid_Tank-black.png|frameless|100px]]2 x Liquid Tank
 +
| scope="row"| [[File:HELIOS-Refined-Steel-black.png|frameless|100px]]10 x Steel
 +
| scope="row"| [[File:HELIOS-Refined-Coils-black.png|frameless|100px]]2 x Coils
 +
|-
 +
! scope="row" colspan="6"| Rare
 +
|-
 +
! scope="col"| Component
 +
! scope="row" colspan="4"| Required Refined Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Engine-black.png|frameless|100px]]Engine
 +
| scope="row"| [[File:HELIOS-Refined-Carbon_Fiber-black.png|frameless|100px]]2 x Carbon Fiber
 +
| scope="row"| [[File:HELIOS-Refined-Coils-black.png|frameless|100px]]2 x Coils
 +
| scope="row"| [[File:HELIOS-Refined-Turbine_Pump-black.png|frameless|100px]]3 x Turbine Pump
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Quantum_Synchronizer-black.png|frameless|100px]]Quantum Synchronizer
 +
| scope="row"| [[File:HELIOS-Refined-Carbon_Fiber-black.png|frameless|100px]]3 x Carbon Fiber
 +
| scope="row"| [[File:HELIOS-Refined-Battery-black.png|frameless|100px]]2 x Battery
 +
| scope="row"| [[File:HELIOS-Refined-Circuit_Board-black.png|frameless|100px]]4 x Circuit Board
 +
|-
 +
! scope="row" colspan="6"| Epic
 +
|-
 +
! scope="col"| Component
 +
! scope="row" colspan="4"| Required Refined Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Ship_Part-black.png|frameless|100px]]Ship Part
 +
| scope="row"| [[File:HELIOS-Refined-Carbon_Fiber-black.png|frameless|100px]]6 x Carbon Fiber
 +
| scope="row"| [[File:HELIOS-Refined-Structulite_Plates-black.png|frameless|100px]]10 x Structulite Plates
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Valkyrie_Guiding_System-black.png|frameless|100px]]Valkyrie Guiding System
 +
| scope="row"| [[File:HELIOS-Refined-Battery-black.png|frameless|100px]]5 x Battery
 +
| scope="row"| [[File:HELIOS-Refined-Microchips-black.png|frameless|100px]]4 x Microchips
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Astrum_CPU-black.png|frameless|100px]]Astrum CPU
 +
| scope="row"| [[File:HELIOS-Refined-Circuit_Board-black.png|frameless|100px]]3 x Circuit Board
 +
| scope="row"| [[File:HELIOS-Refined-Battery-black.png|frameless|100px]]4 x Battery
 +
| scope="row"| [[File:HELIOS-Refined-Microchips-black.png|frameless|100px]]3 x Microchips
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Cooling_Unit-black.png|frameless|100px]]Cooling Unit
 +
| scope="row"| [[File:HELIOS-Refined-Liquid_Tank-black.png|frameless|100px]]5 x Liquid Tank
 +
| scope="row"| [[File:HELIOS-Refined-Vibrasteel-black.png|frameless|100px]]4 x Vibrasteel
 +
| scope="row"| [[File:HELIOS-Refined-Microchips-black.png|frameless|100px]]2 x Microchips
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Communication_Module-black.png|frameless|100px]]Communication Module
 +
| scope="row"| [[File:HELIOS-Refined-Circuit_Board-black.png|frameless|100px]]2 x Circuit Board
 +
| scope="row"| [[File:HELIOS-Refined-Battery-black.png|frameless|100px]]4 x Battery
 +
| scope="row"| [[File:HELIOS-Refined-Microchips-black.png|frameless|100px]]3 x Microchips
 +
| scope="row"| [[File:HELIOS-Refined-Structulite_Plates-black.png|frameless|100px]]4 x Structulite Plates
 +
|-
 +
! scope="row" colspan="6"| Mythic
 +
|-
 +
! scope="col"| Component
 +
! scope="row" colspan="4"| Required Refined Materials
 +
|- align="center"
 +
! scope="row"| [[File:HELIOS-Component-Barrier_Emitter-black.png|frameless|100px]]Barrier Emitter
 +
| scope="row"| [[File:HELIOS-Refined-Zinc_Crystal-black.png|frameless|100px]]5 x Zinc Crystal
 +
| scope="row"| [[File:HELIOS-Refined-Turbine_Pump-black.png|frameless|100px]]2 x Turbine Pump
 +
| scope="row"| [[File:HELIOS-Refined-Microchips-black.png|frameless|100px]]2 x Microchips
 +
| scope="row"| [[File:HELIOS-Refined-Barrier_Catalyst-black.png|frameless|100px]]4 x Barrier Catalyst
 +
|}
  
 +
{| class="mw-collapsible mw-collapsed wikitable"
 +
|+ style=white-space:nowrap | Mission List
 +
! scope="col"| Mission
 +
! scope="row" colspan="5"| Required Components
 +
|-
 +
! scope="row"|  [[File:HELIOS-Alpha-Booster.png|frameless|300px]]Mission Alpha - Boosters
 +
| scope="row" align="center"| [[File:HELIOS-Component-Engine-black.png|frameless|100px]]8 x Engine
 +
| scope="row" align="center"| [[File:HELIOS-Component-Ship_Part-black.png|frameless|100px]]4 x Ship Part
 +
| scope="row" align="center"| [[File:HELIOS-Component-Propellant_Tank-black.png|frameless|100px]]2 x Propellant Tank
 +
|-
 +
! scope="row"|  [[File:HELIOS-Bravo-FirstStage.png|frameless|300px]]Mission Bravo - First Stage
 +
| scope="row" align="center"| [[File:HELIOS-Component-Fuel_Pipes-black.png|frameless|100px]]5 x Fuel Pipes
 +
| scope="row" align="center"| [[File:HELIOS-Component-Cooling_Unit-black.png|frameless|100px]]4 x Cooling Unit
 +
| scope="row" align="center"| [[File:HELIOS-Component-Communication_Module-black.png|frameless|100px]]2 x Communication Module
 +
|-
 +
! scope="row"|  [[File:HELIOS-Charlie-SecondStage.png|frameless|300px]]Mission Charlie - Second Stage
 +
| scope="row" align="center"| [[File:HELIOS-Component-Propellant_Tank-black.png|frameless|100px]]2 x Propellant Tank
 +
| scope="row" align="center"| [[File:HELIOS-Component-Communication_Module-black.png|frameless|100px]]2 x Communication Module
 +
| scope="row" align="center"| [[File:HELIOS-Component-Ship_Part-black.png|frameless|100px]]2 x Ship Part
 +
| scope="row" align="center"| [[File:HELIOS-Component-Engine-black.png|frameless|100px]]6 x Engine
 +
|-
 +
! scope="row"|  [[File:HELIOS-Delta-CommandModule.png|frameless|300px]]Mission Delta - Command Module
 +
| scope="row" align="center"| [[File:HELIOS-Component-Valkyrie_Guiding_System-black.png|frameless|100px]]2 x Valkyrie Guiding System
 +
| scope="row" align="center"| [[File:HELIOS-Component-Astrum_CPU-black.png|frameless|100px]]2 x Astrum CPU
 +
| scope="row" align="center"| [[File:HELIOS-Component-Quantum_Synchronizer-black.png|frameless|100px]]3 x Quantum Synchronizer
 +
| scope="row" align="center"| [[File:HELIOS-Component-Communication_Module-black.png|frameless|100px]]4 x Communication Module
 +
| scope="row" align="center"| [[File:HELIOS-Component-Ship_Part-black.png|frameless|100px]]3 x Ship Part
 +
|-
 +
! scope="row"|  [[File:HELIOS-Echo-BarrierEmitter.png|frameless|300px]]Mission Echo - Barrier Emitter
 +
| scope="row" align="center"| [[File:HELIOS-Component-Engine-black.png|frameless|100px]]5 x Engine
 +
| scope="row" align="center"| [[File:HELIOS-Component-Quantum_Synchronizer-black.png|frameless|100px]]4 x Quantum Synchronizer
 +
| scope="row" align="center"| [[File:HELIOS-Component-Astrum_CPU-black.png|frameless|100px]]3 x Astrum CPU
 +
| scope="row" align="center"| [[File:HELIOS-Component-Barrier_Emitter-black.png|frameless|100px]]5 x Barrier Emitter
 +
|}
  
The first satellite in the sequence was SATCAT number <code>00015</code>, corresponding to the '''Explorer 6''' satellite. This answer was gotten from page 1 of the coredump, with Explorer 6's serial number being "Thor 134". Entry of this UID returned the players with the first fifth of the branchid: '''"a4"'''
+
===Terminal Update===
 +
At around 21:00 UTC on 2021-12-12, the HELIOS OS terminal updated and players were able to resume using commands within it again. Included within this update was a new command, <code>chcksum</code>. When players ran the help command for this, they found the latest query in the system inventory used against this command.
  
 +
Running <code>query chcksum.3133</code> to replicate the last system inventory call showed players a list of IDs associated with several raw materials they had been collecting, as well as one ID that was corrupted - this was for the incredibly rare Twitchitrium resource.
  
The second in the sequence was SATCAT number <code>00055</code>, corresponding to the '''Sputnik 5''' satellite. This answer was gotten from page 2 of the coredump, with "Little Arrow" being the translated name of Strelka, one of the two dogs aboard the Sputnik 5 satellite. Entry of this UID returned the players with the second fifth of the branchid: '''"g7"'''
+
Based on command usage tips found by using <code>help chcksum</code>, players starting to run the command against several IDs (e.g. <code>chksum 1111</code> and <code>chcksum 02a8951</code>. They quickly discovered that the IDs fell into three categories:
 +
- ID 1111 (COMGRP) would always report back with a block of zeros (zeros were in blocks of 4 with the grid being 4 by 7 blocks for a total of 28 blocks).
 +
- ID 3333 (Twitchitrium) would always report back that the data is too fragmented. While there was a repair command listed in the help tool, players were initially unable to use it due to lacking the required commit-id
 +
- All other IDs would report back a similar block of numbers as 1111 but with up to 4 digits changed, as well as a country code identifier '''but only if''' the player entering the command was in a specific country. Each of these IDs were assigned to different countries and so no single players would have access to all of the data.
 +
 +
Players collaborated to find those in different countries to test the command.
  
 +
{| class="wikitable"
 +
|-
 +
! scope="col"| ID
 +
! scope="col"| Country
 +
| scope="row"| Material
 +
! scope="col"| Data Block
 +
|- align="center"
 +
! scope="row"| 02a8951
 +
| scope="row"| India
 +
| scope="row"| Zinc
 +
| scope="row"| 
 +
  0000 0000 0000 0000
 +
  0000 0000 '''00A5''' 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
|- align="center"
 +
! scope="row"| 02b9215
 +
| scope="row"| Mexico
 +
| scope="row"| Copper
 +
| scope="row"| 
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 '''003C'''
 +
|- align="center"
 +
! scope="row"| 02c1243
 +
| scope="row"| Australia
 +
| scope="row"| Lithium
 +
| scope="row"| 
 +
  0000 0000 '''U100''' 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
|- align="center"
 +
! scope="row"| 03a2481
 +
| scope="row"| Norway
 +
| scope="row"| Titanium
 +
| scope="row"| 
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  '''00M4''' 0000 0000 0000
 +
  0000 0000 0000 0000
 +
|- align="center"
 +
! scope="row"| 03b9481
 +
| scope="row"| Turkey
 +
| scope="row"| Chrome
 +
| scope="row"| 
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 '''Z1FE''' 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
|- align="center"
 +
! scope="row"| 04ad6411
 +
| scope="row"| United States
 +
| scope="row"| Gold
 +
| scope="row"| 
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 '''UX00''' 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
|- align="center"
 +
! scope="row"| 04b9781
 +
| scope="row"| Canada
 +
| scope="row"| Gamium
 +
| scope="row"| 
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 '''G700'''
 +
  0000 0000 0000 0000
 +
  0000 0000 0000 0000
 +
|}
  
The third in the sequence was SATCAT number <code>04382</code>, corresponding to the '''DFH-1''' satellite. This answer was gotten from page 3 of the coredump, with "92 TJ" meaning 92 Tera Joules, the explosive yield of China's Project 596, as part of the Two Bombs One Satellite project, of which DFH-1 was the first satellite launched by the project. Entry of this UID returned the players with the third fifth of the branchid: '''"x9"'''
+
Players found that the countries that could access a particular material's ID were large manufacturers of that given material (Gamium being the exception and being available to Canada, most likely in reference to Alice & Smith's game development studios being based there).
  
 +
By taking each of the modified blocks in each of the response (the values in bold in the above table) and ordering them based on their row before removing any remaining zeroes, players found the ID '''U1A5UXZ1FEG7M43C'''. Using this ID as part of the repair command (<code>chcksum U1A5UXZ1FEG7M43C -repair</code>) enabled players to repair the Twitchitrium ID. This activated a global drop event, rewarding many players across all streams with 10 Twitchitrium.
  
The fourth in the sequence is unknown. Its part of the branchid, '''"c1"''', was bruteforced.  
+
Shortly after players first ran this command, several changes were spotted in the Lights Out Factory, including a 5th portal activating, and the 4 that were already activated turning from an orange color to blue.
  
 +
==The Launch==
 +
Around 20:45 UTC on 2021-12-13, the [https://www.twitch.tv/twitchgaming TwitchGaming Twitch Channel] restarted it's stream and, when it came back online, players found a timer until the predicted time when the solar flare would reach earth (at 20:45 this was T-01:15:00 as the predicted arrival time as 22:00 UTC). Additionally, the NOAA Space Weather Index now showed all as level 5 - extreme.
  
The fifth in the sequence was SATCAT number <code>04489</code>, corresponding to the '''Venera-7''' satellite. This answer was gotten from page 5 of the coredump, with "243 days" referring to the rotational period of the planet Venus, which is 243 days. The satellite itself was found by virtue of being the first satellite to ever return data about Venus to humanity. Entry of this UID returned the players with the final part of the branchid: '''"d7"'''.
+
At 21:00 UTC, Twitch streamer [https://www.twitch.tv/deejayknight DeejayKnigt] appeared on Stream and provided background on the events leading up to the final hour. After recapping the events, Deejay interviewed Twitch Streamers [https://www.twitch.tv/one_shot_gurl ONE_shot_GURL], [https://www.twitch.tv/datadave DataDave] and [https://www.twitch.tv/lana_lux Lana_Lux], discussing their favourite parts of the event, reviewing some statistics related to their missions and their viewer's contributions as well as questions which crossed over HELIOS with the streamer's interests, such as ONE_shot_GURL's Pokemon cards and DataDave's anime knowledge.
  
 +
From 21:35 UTC (T-25:00), the four streamers all appeared on stream together and discussed the event together, including specific moments like the shortage of Structulite Plates and Turbine Pumps early on or the low drops of Copper in the final hours. The discussion continued for some time with questions from the chat and banter about the last few days.
  
With all 5 parts of the branchid discovered, players put them together to complete the command <code>execute 25798 -commit -a4g7x9c1d7</code>. Entry of this command began a similar process to the factory door, requesting 100 unique entries of the command to continue.  
+
At 21:58 UTC (T-02:00), callouts from a command center could be heard identifying each of the required stages of the rocket launch complete (e.g. propellant load etc.).
  
As of 2021-12-08 9:30 PM UTC, this phase is ongoing.
+
After a slight glitch in the stream, the rocket - RAMPART 1 - launched at 22:02 UTC. The rocket performed well and shortly afterwards the Barrier Emitter deployed just in time to protect Earth from the incoming Solar Flare. With this, the RAMPART Initiative and wider HELIOS Project was a success.

Latest revision as of 02:18, 3 August 2024

HELIOS
Completed on 2021-12-13
Dscs.png
The Department of Defense has declassified access via uplink to the DSCS 3 satellite. Good Luck and Godspeed.
Type Official
Creator Alice & Smith and Twitch, Inc.
Discovered 2021-12-05
Completed 2021-12-13

Main Page > List of Investigations > HELIOS

The HELIOS ARG, initially known as the DSCS-III-A3 ARG is an ongoing ARG produced by Alice & Smith in collaboration with Twitch, Inc which started on 5th December 2021. The initial trailhead informed players that access to a Department of Defense communication satellite was now authorized, with clues leading players to a stream where terminal commands led them deeper into an unknown complex.

List of additional pages
List of Helios terminal commands and outputs Repository of all Helios terminal commands and their associated outputs.
Gallery of Helios camera checks Repository of Helios camera check images.

Initial Discovery

At 03:24 UTC on 2021-12-05, the Alice & Smith (A&S) Twitter account tweeted "WARNING - DSCS III A3 access has been authorized. Good Luck and Godspeed." with a link to the A&S Discord. DSCS III-A3, officially known as USA-167, is an active satellite that is part of the Defense Satellite Communications System (DSCS). The DSCS forms part of the United States' military communication network, with DSCS III-A3 specifically being the penultimate launch of this constellation in March of 2003.

This was followed up at 17:05 UTC with a second tweet stating "UPDATES | Dec 5th | - DSCS III A3 IRC TOR uplink and RTMP FEED updated to version 636f-rev1.". The reference to an RTMP feed led players to a Twitch stream titled HELIOS Task Force on the dscs_iii_a3 channel.

Discovering the Stream

The NOAA Weather Scale indicators as seen at the start of the ARG
When players first connected to the stream they saw a hallway illuminated with occasionally flashing red lights and a large vault-like door at the end. On screen there was also a Data ID (UR-SRV-V.01 3333), the local time (which was UTC-8) and a status field which showed as "Offline". Finally, there were three green colored boxes with text inside each - G-1, S-1, and R-1. This was discovered slightly later in the ARG to be referring to the NOAA Space Weather Scales, a series of indicators for space weather conditions that can impact the health of satellites, communications, astronauts and the like. The scale ranges from 1 to 5 and with all three indicators at 1, the current conditions reported are all minor.

The stream contained an interactive terminal which users could enter commands into and get responses from. The initial terminal upon loading the stream was:

Setting hostid: 636f-rev1...
Entropy harvesting: interrupt ethernet
Fast boot: skipping disk checks
Mounting remote file systems
Starting network: DVB-TEXT DSCS-III-A3
Uplink Parameters: 7600 mhz - 7604 mhz
Additional TCP/IP options: .sgov=1
Starting IRC TOR PID
Manual: www.intelink.sgov.gov/wiki-ts/cmd-636f
Starting background file system check in 60 seconds

Clicking on the icon to the right of the stream for the Helios terminal popped up a Twitch window describing it. This included a note saying that the command help should be used to start.

Queries and Key Systems

Converting the hexadecimal code found by inputting the version command to text produced the message command 'query' support = 1. This new command, query could be confirmed by typing in help query, which in turn led to the discovery of the latest system inventory, chks1029 which, when queried, returned a list of currently active modules:

ERROR: chks1029 format type table
  31575 | Factory Main Door
  25798 | Security Terminal
  75879 | Main Control Room
  59579 | Nuclear Blast Door
  99879 | Lights Out Factory
  65548 | Assembly Line Alpha
  65549 | Assembly Line Beta
  65550 | Assembly Line Delta
  65551 | Assembly Line Gamma
  75998 | Site Alpha
Invalid query for module 'chks1029'

Factory Main Door

When attempting to use the IDs from chks1029 as a part of other commands, players found that the only entry that would return anything was 31575 - the Factory Main Door. The command query 31575 informed players that there was a command to both open and close the door, however an access code was required. The command coredump 31575 provided a list of 9 individual coredump pages with various details scattered throughout.

Arranging the Grid

Players quickly identified that pages 1, 4, and 8 were of the same format and were likely related to the hint in the coredump 31575 command of 180 entries / GRID 20 by 9. With 9 blocks of data, each containing 4 lines of 5 numbers, players ended up re-arranging the numbers such that a single block would form one column of the eventual grid, with numbers transposed in order (left-to-right, top-to-bottom). e.g.:

666	242	355
576	483	559

would become

666
242
355
576
483
559

By ordering the numbers in this manner, and ordering the columns according to the block numbers (1 on the left and increasing to 9 on the right), players had a complete grid that they began to investigate how to decode.

Distorted Audio Message

Around 00:30 UTC on 2021-12-06, those listening to the stream heard a distorted audio file play instead of the usual background track, and around 30 minutes later, was discovered to have updated from showing nothing, to now referencing the completion of an audio frequency render (presumed to be related to the distorted audio file slightly before).

The audio file was inspected and found to contain distinct two distinct sounds, a high pitched "sonar ping"-like sound and a deep bass sound. By looking at the number of bass sounds in a row and splitting them into groups using the high pitched sound as a delimiter, players found the numbers 2, 3, 5 and 8. These numbers correspond to the 3rd through 6th numbers in the Fibonacci sequence. While players had already been suspecting there was some sort of manipulating of filtering, the large block of numbers and this file was related, it was not possible to correlate the two at the time.

At around 03:30 UTC a message was posted in chat by the DSCS_III_A3 channel which notified players that there was an "error" and "repo diff ---p3-raw-AUDIO_RENDER +++p3-clean_AUDIO_RENDER. diff files analysis IS required". In plain English, this message indicated to players that the original "raw" audio file was replaced with a new, "clean" one, and that the new file will need to be analyzed.

The substituted grid on it's side, forming the word KEY.

Decoding the Grid

Upon listening to the file, or viewing the waveform of the audio file, players noticed that the final bass tone was removed, changing the sequence to now be 2,3,5,7. This meant it was no longer part of the Fibonacci sequence but instead they were the first 4 Prime numbers. By reviewing the 20 by 9 block of numbers, and replacing all of the non-prime numbers with 0, while all of the prime numbers are changed to 1, before rotating the grid 90 degrees counter-clockwise, the arrangement of prime numbers spelled out the word key.

With this keyword, players were able to enter the command execute 31575 -open -key into the terminal. Upon entering the command, players received the following confirmation:

The NOAA Space Weather Index after door keys began to be entered
The NOAA Space Weather Index after the door opened
Accessing local PGP Key
/home/31337/.ssh/31575
Access authorized
Requests received so far: 0
Connecting to module 31575
TAK1 - Valid
TAK6 - Valid
BGD8 - Valid
DTB3 - Valid
SDD4 - Valid
Adding your entry, please wait...
Process completed.

Individually there was no significant change for each single player, however as time progressed and more players entered the code, status updates were provided in chat indicating how many more entries were still needed. Initially this was 25, then 50, then 100 before finally 200. As each goal was reached, a glowing ring expanded until it encircled the door. Additionally, as goals were reached, new camera feeds were revealed and occasionally cycled through, showing other areas of the facility beyond the main door and that players would soon need to be working on. Players also noticed that after commands started to be sent to open the door, the NOAA Space Weather Index in the bottom rght had changed to indicate S-2 (or Moderate Solar Radiation Storms).

At 11:35 UTC on 2021-12-07, the 200th command to open the door was sent, and the door opened. At the same time, the NOAA Space Weather Index updated again to now show S-3 and R-2 (Strong Solar Radiation Storms and Moderate Radio Blackouts)

Security Terminal

On 2021-12-08, at 00:00 UTC, or 16:00 Stream Local Time, another revision was announced to the terminal program bringing it up to revision 5. This revision enabled the coredump and query commands to be used on module 25798 - Security Terminal.

On query 25798 being used in the Helios terminal on the stream, it outputted two commands to be used on module 25798. The security terminal required two different inputs to be executed on it: registering a UID, and committing a branchid. These ID numbers were to be solved for, using the information obtained from using coredump 25798. On execution of the command, 5 files were generated that could be read along with the line 5 entries / 10 digits ID, which seemed to indicate that a 10 digit ID number was required for this terminal. Each coredump file generated had its own clues, that once investigated, seemed to point towards different satellites that had been launched into space. At the time of the security terminal activating, however, the significance of the satellites was not yet clear to players, and while several inputs were attempted based on the information of the satellites, no valid entries were uncovered.

The image from the third fragment URL of page 1 coredump

On 2021-12-8, at approximately 8:30 PM UTC, or 12:30 Stream Local Time, the terminal program had another revision bringing it up to Revision 6. This brought the CSR (Clippy SubRoutine) subroutine online, but is simply called clippy in the terminal commands. On using query clippy, a command is listed to read various pages of its help message database, where it appears to be helping an unknown individual. Amongst these pages was mention that space objects tracked by NORAD are registered with their own unique SATCAT, or Satellite Catalog, number. With this information, the SATCAT numbers of the satellites, identified with the coredump information, were used as the UID number for the execute 25798 -register -<UID> command. These returned valid entries, which outputted two-digit branch sequences for each of the 5 satellites. When all the branch sequences were arranged in order, it produced a 10 digit code that could be inputted using the execute 25798 -commit -<branchid> command. The method of solving the UIDs and branchid are detailed below.

Page 1 Coredump Solution

On reading the page 1 coredump in the terminal, three block fragments were produced that had different clues on them:

  1. Aug
  2. 134
  3. data.dscsiii-a3.directory/31zCVhu
The image from the 1st fragment URL of the page 4 coredump
The image from the 2nd fragment URL of the page 4 coredump

The third fragment's URL, when put into a browser, linked to an image of the Thor's Fight with the Giants painting. Combining Thor with the other information lead to the Thor-able expendable rocket launch system. In August, this system was used to launch one satellite on vehicle 134, Explorer 6. Explorer 6's SATCAT number is 00015, which when inputted into the Helios Terminal using execute 25798 -register -00015, would yield the result of BranchSequence_01(a4), leading to a4 being the first digits of the branchid.

Page 2 Coredump Solution

On reading the page 2 coredump in the terminal, only one block fragment was produced with the words "Little Arrow". Little Arrow, when translated into Russian, yields the name Strelka, the name of one of the dogs aboard the Sputnik 5 satellite. Inputting Sputnik 5's SATCAT number, 00055, into the terminal using execute 25798 -register -00055 yields the result of BranchSequence_02(g7) leading g7 to be the next 2 digits of the branchid.

Page 3 Coredump Solution

On reading the page 3 coredump in the terminal, only one block fragment was produced with the words "92 TJ". TJ is the abbreviation for Tera Joules, a method of measuring explosive yields, with values this high often being seen only in nuclear weapons. 92 TJ can be applied to several different nuclear weapons but in keeping with the satellite theme only one really matches, China's Project 596 which was part of the Two Bombs, One Satellite project. The satellite in question was the Dong Fang Hong I or also known as China 1 which has the SATCAT number of 04382. When inputted into the terminal using execute 25798 -register -04382 it outputs the result of BranchSequence_03(x9) leading x9 to be the next two digits of the branchid.

Page 4 Coredump Solution

On reading the page 4 coredump in the terminal, two block fragments were produced that had different clues on them:

  1. data.dscsiii-a3.directory/3dzEo9L
  2. data.dscsiii-a3.directory/3y4KyIo

As with the page 1 coredump image, these URLs also link to images: Image 1 & Image 2. The first image is a logo for Interkosmos, the space program for the Soviet Union. The second image is a cropped-out piece of the School of Athens fresco which in particular is focused on Euclid. When comparing the two, no satellites launched by Interkosmos bore the name Euclid nor was Greece even involved in the program. When probing deeper with the Euclid algorithm and the countries that were part of the Interkosmos program you find there was a similar algorithm devised by an Indian astronomer called Aryabhata and which has a satellite named after that was launched in the Interkosmos program. When inputting this satellite's SATCAT number into the terminal using execute 25798 -register -07752 it yields the result of BranchSequence_04(c1) which are the next two digits of the branchid.

Camera view once the security terminal terminal was completed

Page 5 Coredump Solution

On reading the page 5 coredump in the terminal, only one block fragment was produced with the number "243". Searching the number with respect to space finds that Venus has a rotational period of 243 earth days. While there is several artificial satellites in relation to Venus the one with distinction is Venera 7 which was the first one to soft-land on Venus and transmit data back to Earth. Inputting its SATCAT number into the terminal using execute 25798 -register -04489 yields the result of BranchSequence_05(d7) which are the last digits of the branchid.

25798 Solution

When all the branch sequences are arranged in order, it yields a 10 digit id number of a4g7x9c1d7 which can be inputted in the terminal using execute 25798 -commit -a4g7x9c1d7 and yielded the result of adding your entry to the terminal. Once 100 entries in total were collected from unique twitch ids, the hallway lights turned green and the broadcast was interrupted by a moving graphic that repeated a string of numbers and letters. Once this was over, the terminal was updated with access granted to the Main Control Room.

Main Control Room

Query & Coredump 75879

The third module began with the discovery of only two commands linked to it, being the frequently used query and coredump commands.

Entering query 75879 would return differently than the other query commands have, reading the following.

Query Module 75879
Status Request - Main Control Room
Authorized commands:
  Unavailable
  Unavailable
Please stand by...
Module Status: Offline

Players then entered coredump 75879, returning a reference to the first module, and a list of links.

WARNING: memory coredump for 75879
Generating files...
Error, Data Integrity Failed
Missing reference on 31575.page7
Tracking sequence started...
  FOUND: data.dscsiii-a3.directory/3lL5XkY
  FOUND: data.dscsiii-a3.directory/3EGivlb
  FOUND: data.dscsiii-a3.directory/3pLvv2W
  FOUND: data.dscsiii-a3.directory/3EDZnEu
  FOUND: data.dscsiii-a3.directory/3GsEHQs
  FOUND: data.dscsiii-a3.directory/3IAbAMX
  FOUND: <error>
Missing data
Scan schedule: Every 4h
Process Failed

The six links all redirect to twitch clips, each from seemingly normal streamers being interrupted by a similar visual & sequences of numbers as the main livestream had been.

Later the next day, two more clips were added: data.dscsiii-a3.directory/31FOELm, and data.dscsiii-a3.directory/3dyTMTY. The command also updated to say Pattern Detected: DSCS.III-A3.Authorization.XXXXXXX near the bottom, providing the format for the next solution. A ninth clip occurred during Twitch Gaming's pre-show for The Game Awards 2021, at 12:17 AM UTC, and a tenth during the post-show at 4:21 AM UTC. The day after that, an eleventh occurred during Twitch Gaming's winter gathering livestream at 8:38 PM UTC.

Grid Power Distribution

At 21:03 UTC on 2021-12-10 the stream updated to focus on a batch of terminals with different values listed on them. In addition, the terminal initialization text updated to Revision 10, and players who re-ran the query 75879 command were directed to use the new grid command.

The stream view while working on the grid puzzle, showing the three batches of terminals (left, center and right) and the up/down arrows of light above the central screens

The initial command used, grid status, informed players that there are three grid IDs, 33, 66 and 99 which need power distributed to them. This could be delivered in batches of either 10, 100 or 1000 megawatts, but would require collaboration with other users to apply. Specifically, the system required 2 users to wake the system and make it ready to accept commands (this was seen with a blue screen), a further 3 users to prepare the signal (resulting in a yellow screen on the terminals) and then another 5 users to commit the power increase (confirmed by a red screen with the word COMMIT over the top). The 10 users required to commit a power increase had to be unique within that set, however once a command was committed, the same 10 users could then submit a new command (i.e. 10 users could add 100 power, then once done they could add another 100 without needing anyone extra). The final part of the grid status command warned players that the system was unstable, and that the system would recycle regularly. Initially, this was a 5 minute reset cycle (as described by the CRON expression */5 * * * *)

Players initially started adding power to different grid IDs to try and find the right value, however progress was frequently reset without identifying a particular value. After some time, players noticed that when increasing a particular grid IDs power too far, the white light above one of the screens turns red and the red light below turns white. These lights formed arrows pointing up and down and players soon realized that these indicated if the current power value was too low (with the light above and arrow pointing down) or too high (light below and arrow pointing up).

With this new information, players gradually stepped through power increments and, upon exceeding the desired value, resetting and then stepping through a range with lower increments (i.e. increasing by 1000 increments - 0,1000,2000,3000, reset when it's too high - then use 100 increments for the section before it swapped - 0,1000,2000,2100,2200). Using this method, players slowly worked through and identified the three correct power levels with ID 33 being 2200MW, ID 66 being 12000MW and ID 99 being 40100MW.

HELIOS OS Activation

At around 02:20 UTC on 2021-12-11, all grids were stabilized, and shutters opened allowing a view out to the Lights Out Factory with 4 portals which soon activated. At the same time, the Twitch Gaming channel was just finishing up one of it's awards shows and during the end card, 3 slides of text were shown with an emergency alert tone playing instead of the usual background music. The slides informed players that:

The portal-like structures that activated in the Lights Out Factory

Following the prediction of a solar flare with a coronal mass ejection (CME) 20 times bigger than the Carrington Event of 1859, the Department of Defence is declaring a global state of emergency. Projections show that this event will happen on 2021-12-12 at 21:00 PST and will take 17 hours to reach Earth.

Government resources are now considered insufficient, immediate citizen contribution is required. The HELIOS Task Force has been re-activated in response to this global threat. Distributed computing effort is required through the livestream platform designation : TWITCH.

Agents, the RAMPART Initiative is now live.

At the end of the Twitch Gaming Awards stream, the channel started a raid on the HELIOS channel which directed ~50,000 viewers to the channel.

Finally, the HELIOS terminal upgraded to a full HELIOS OS, providing players with the ability to view their profile (including achievements), view collected resources, a timeline, a list of streamers who had integrated the HELIOS OS with their stream and a new and upgraded terminal window (none of the old commands carried over to this new one).

The holographic display of the ship that players worked to create

The purpose of the HELIOS OS and the overall RAMPART Initiative was to have the community collect resources, send them to streamers who were running the HELIOS OS extension (thereby acting as resource pools) and contributing to the overall mission to prevent the effects of the solar flare. Streamers could choose specific missions to focus on (such as boosters or a command module) with traded resources from players being directed towards that mission objective. Additionally, becoming a HELIOS OS Streamer would prevent that individual from receiving the regular raw material allocation that regular players received automatically (such materials being refined and then sent to streamers of their choice, thus providing a constant steady flow of resources around the community).

Below is a list of all of the materials players received to send to streamers, who would make the components for missions.

Raw Materials List
Common HELIOS-Raw-Al-black.pngAluminium HELIOS-Raw-C-black.pngCarbon HELIOS-Raw-Fe-black.pngIron HELIOS-Raw-Py-black.pngPolymers
Uncommon HELIOS-Raw-Zn-black.pngZinc HELIOS-Raw-Cu-black.pngCopper HELIOS-Raw-Li-black.pngLithium
Rare HELIOS-Raw-Ti-black.pngTitanium HELIOS-Raw-Cr-black.pngChrome
Epic HELIOS-Raw-G-black.pngGold HELIOS-Raw-Gm-black.pngGamium
Mythic HELIOS-Raw-Tw-black.pngTwitchitrium
Refined Materials List
Common
Refined Material Required Raw Materials
HELIOS-Refined-Steel-black.pngSteel HELIOS-Raw-Fe-black.png5 x Iron HELIOS-Raw-C-black.png5 x Carbon
HELIOS-Refined-Liquid Tank-black.pngLiquid Tank HELIOS-Raw-C-black.png3 x Carbon HELIOS-Raw-Al-black.png5 x Aluminium HELIOS-Raw-Fe-black.png2 x Iron
HELIOS-Refined-Carbon Fiber-black.pngCarbon Fiber HELIOS-Raw-Py-black.png2 x Polymers HELIOS-Raw-C-black.png4 x Carbon
Uncommon
Refined Material Required Raw Materials
HELIOS-Refined-Coils-black.pngCoils HELIOS-Raw-Fe-black.png3 x Iron HELIOS-Raw-Cu-black.png3 x Copper
HELIOS-Refined-Zinc Crystal-black.pngZinc Crystal HELIOS-Raw-C-black.png2 x Carbon HELIOS-Raw-Zn-black.png5 x Zinc
Rare
Refined Material Required Raw Materials
HELIOS-Refined-Turbine Pump-black.pngTurbine Pump HELIOS-Raw-Al-black.png3 x Aluminium HELIOS-Raw-Ti-black.png4 x Titanium
HELIOS-Refined-Circuit Board-black.pngCircuit Board HELIOS-Raw-Py-black.png1 x Polymers HELIOS-Raw-Cu-black.png3 x Copper HELIOS-Raw-Cr-black.png1 x Chrome
HELIOS-Refined-Battery-black.pngBattery HELIOS-Raw-Py-black.png4 x Polymers HELIOS-Raw-Li-black.png2 x Lithium HELIOS-Raw-Cr-black.png2 x Chrome
HELIOS-Refined-Vibrasteel-black.pngVibrasteel HELIOS-Raw-Fe-black.png5 x Iron HELIOS-Raw-Ti-black.png3 x Titanium HELIOS-Raw-Cr-black.png2 x Chrome
Epic
Refined Material Required Raw Materials
HELIOS-Refined-Structulite Plates-black.pngStructulite Plates HELIOS-Raw-Al-black.png4 x Aluminium HELIOS-Raw-Zn-black.png3 x Zinc HELIOS-Raw-G-black.png1 x Gold HELIOS-Raw-Gm-black.png1 x Gamium
HELIOS-Refined-Microchips-black.pngMicrochips HELIOS-Raw-Py-black.png4 x Polymers HELIOS-Raw-G-black.png1 x Gold
Mythic
Refined Material Required Raw Materials
HELIOS-Refined-Barrier Catalyst-black.pngBarrier Catalyst HELIOS-Raw-Ti-black.png3 x Titanium HELIOS-Raw-Gm-black.png4 x Gamium HELIOS-Raw-Tw-black.png5 x Twitchitrium
Components List
Common
Component Required Refined Materials
HELIOS-Component-Propellant Tank-black.pngPropellant Tank HELIOS-Refined-Liquid Tank-black.png3 x Liquid Tank HELIOS-Refined-Steel-black.png4 x Steel
Uncommon
Component Required Refined Materials
HELIOS-Component-Fuel Pipes-black.pngFuel Pipes HELIOS-Refined-Liquid Tank-black.png2 x Liquid Tank HELIOS-Refined-Steel-black.png10 x Steel HELIOS-Refined-Coils-black.png2 x Coils
Rare
Component Required Refined Materials
HELIOS-Component-Engine-black.pngEngine HELIOS-Refined-Carbon Fiber-black.png2 x Carbon Fiber HELIOS-Refined-Coils-black.png2 x Coils HELIOS-Refined-Turbine Pump-black.png3 x Turbine Pump
HELIOS-Component-Quantum Synchronizer-black.pngQuantum Synchronizer HELIOS-Refined-Carbon Fiber-black.png3 x Carbon Fiber HELIOS-Refined-Battery-black.png2 x Battery HELIOS-Refined-Circuit Board-black.png4 x Circuit Board
Epic
Component Required Refined Materials
HELIOS-Component-Ship Part-black.pngShip Part HELIOS-Refined-Carbon Fiber-black.png6 x Carbon Fiber HELIOS-Refined-Structulite Plates-black.png10 x Structulite Plates
HELIOS-Component-Valkyrie Guiding System-black.pngValkyrie Guiding System HELIOS-Refined-Battery-black.png5 x Battery HELIOS-Refined-Microchips-black.png4 x Microchips
HELIOS-Component-Astrum CPU-black.pngAstrum CPU HELIOS-Refined-Circuit Board-black.png3 x Circuit Board HELIOS-Refined-Battery-black.png4 x Battery HELIOS-Refined-Microchips-black.png3 x Microchips
HELIOS-Component-Cooling Unit-black.pngCooling Unit HELIOS-Refined-Liquid Tank-black.png5 x Liquid Tank HELIOS-Refined-Vibrasteel-black.png4 x Vibrasteel HELIOS-Refined-Microchips-black.png2 x Microchips
HELIOS-Component-Communication Module-black.pngCommunication Module HELIOS-Refined-Circuit Board-black.png2 x Circuit Board HELIOS-Refined-Battery-black.png4 x Battery HELIOS-Refined-Microchips-black.png3 x Microchips HELIOS-Refined-Structulite Plates-black.png4 x Structulite Plates
Mythic
Component Required Refined Materials
HELIOS-Component-Barrier Emitter-black.pngBarrier Emitter HELIOS-Refined-Zinc Crystal-black.png5 x Zinc Crystal HELIOS-Refined-Turbine Pump-black.png2 x Turbine Pump HELIOS-Refined-Microchips-black.png2 x Microchips HELIOS-Refined-Barrier Catalyst-black.png4 x Barrier Catalyst
Mission List
Mission Required Components
HELIOS-Alpha-Booster.pngMission Alpha - Boosters HELIOS-Component-Engine-black.png8 x Engine HELIOS-Component-Ship Part-black.png4 x Ship Part HELIOS-Component-Propellant Tank-black.png2 x Propellant Tank
HELIOS-Bravo-FirstStage.pngMission Bravo - First Stage HELIOS-Component-Fuel Pipes-black.png5 x Fuel Pipes HELIOS-Component-Cooling Unit-black.png4 x Cooling Unit HELIOS-Component-Communication Module-black.png2 x Communication Module
HELIOS-Charlie-SecondStage.pngMission Charlie - Second Stage HELIOS-Component-Propellant Tank-black.png2 x Propellant Tank HELIOS-Component-Communication Module-black.png2 x Communication Module HELIOS-Component-Ship Part-black.png2 x Ship Part HELIOS-Component-Engine-black.png6 x Engine
HELIOS-Delta-CommandModule.pngMission Delta - Command Module HELIOS-Component-Valkyrie Guiding System-black.png2 x Valkyrie Guiding System HELIOS-Component-Astrum CPU-black.png2 x Astrum CPU HELIOS-Component-Quantum Synchronizer-black.png3 x Quantum Synchronizer HELIOS-Component-Communication Module-black.png4 x Communication Module HELIOS-Component-Ship Part-black.png3 x Ship Part
HELIOS-Echo-BarrierEmitter.pngMission Echo - Barrier Emitter HELIOS-Component-Engine-black.png5 x Engine HELIOS-Component-Quantum Synchronizer-black.png4 x Quantum Synchronizer HELIOS-Component-Astrum CPU-black.png3 x Astrum CPU HELIOS-Component-Barrier Emitter-black.png5 x Barrier Emitter

Terminal Update

At around 21:00 UTC on 2021-12-12, the HELIOS OS terminal updated and players were able to resume using commands within it again. Included within this update was a new command, chcksum. When players ran the help command for this, they found the latest query in the system inventory used against this command.

Running query chcksum.3133 to replicate the last system inventory call showed players a list of IDs associated with several raw materials they had been collecting, as well as one ID that was corrupted - this was for the incredibly rare Twitchitrium resource.

Based on command usage tips found by using help chcksum, players starting to run the command against several IDs (e.g. chksum 1111 and chcksum 02a8951. They quickly discovered that the IDs fell into three categories:

- ID 1111 (COMGRP) would always report back with a block of zeros (zeros were in blocks of 4 with the grid being 4 by 7 blocks for a total of 28 blocks).
- ID 3333 (Twitchitrium) would always report back that the data is too fragmented. While there was a repair command listed in the help tool, players were initially unable to use it due to lacking the required commit-id
- All other IDs would report back a similar block of numbers as 1111 but with up to 4 digits changed, as well as a country code identifier but only if the player entering the command was in a specific country. Each of these IDs were assigned to different countries and so no single players would have access to all of the data.

Players collaborated to find those in different countries to test the command.

ID Country Material Data Block
02a8951 India Zinc
 0000 0000 0000 0000
 0000 0000 00A5 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
02b9215 Mexico Copper
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 003C
02c1243 Australia Lithium
 0000 0000 U100 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
03a2481 Norway Titanium
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 00M4 0000 0000 0000
 0000 0000 0000 0000
03b9481 Turkey Chrome
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 Z1FE 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
04ad6411 United States Gold
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 UX00 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
04b9781 Canada Gamium
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 0000
 0000 0000 0000 G700
 0000 0000 0000 0000
 0000 0000 0000 0000

Players found that the countries that could access a particular material's ID were large manufacturers of that given material (Gamium being the exception and being available to Canada, most likely in reference to Alice & Smith's game development studios being based there).

By taking each of the modified blocks in each of the response (the values in bold in the above table) and ordering them based on their row before removing any remaining zeroes, players found the ID U1A5UXZ1FEG7M43C. Using this ID as part of the repair command (chcksum U1A5UXZ1FEG7M43C -repair) enabled players to repair the Twitchitrium ID. This activated a global drop event, rewarding many players across all streams with 10 Twitchitrium.

Shortly after players first ran this command, several changes were spotted in the Lights Out Factory, including a 5th portal activating, and the 4 that were already activated turning from an orange color to blue.

The Launch

Around 20:45 UTC on 2021-12-13, the TwitchGaming Twitch Channel restarted it's stream and, when it came back online, players found a timer until the predicted time when the solar flare would reach earth (at 20:45 this was T-01:15:00 as the predicted arrival time as 22:00 UTC). Additionally, the NOAA Space Weather Index now showed all as level 5 - extreme.

At 21:00 UTC, Twitch streamer DeejayKnigt appeared on Stream and provided background on the events leading up to the final hour. After recapping the events, Deejay interviewed Twitch Streamers ONE_shot_GURL, DataDave and Lana_Lux, discussing their favourite parts of the event, reviewing some statistics related to their missions and their viewer's contributions as well as questions which crossed over HELIOS with the streamer's interests, such as ONE_shot_GURL's Pokemon cards and DataDave's anime knowledge.

From 21:35 UTC (T-25:00), the four streamers all appeared on stream together and discussed the event together, including specific moments like the shortage of Structulite Plates and Turbine Pumps early on or the low drops of Copper in the final hours. The discussion continued for some time with questions from the chat and banter about the last few days.

At 21:58 UTC (T-02:00), callouts from a command center could be heard identifying each of the required stages of the rocket launch complete (e.g. propellant load etc.).

After a slight glitch in the stream, the rocket - RAMPART 1 - launched at 22:02 UTC. The rocket performed well and shortly afterwards the Barrier Emitter deployed just in time to protect Earth from the incoming Solar Flare. With this, the RAMPART Initiative and wider HELIOS Project was a success.