Waking Titan/WARE Developer Area
The WARE Developer Area was accessed using the credentials
[email protected] / f1orbiag55z1. Initially, it contained a main page, a developer profile page and multiple inaccessible pages. The main page presented an overview of user statistics and an empty main WARE token wallet. Alongside the empty wallet were 12 wallets labelled Alpha-Lima in the NATO Phonetic alphabet, each containing 256 WARE. The Documents and Task Manager pages were inaccessible due to Arnaud Lacours' account having an insufficient clearance level. The Request Supplies page was inaccessible due to insufficient funds (where funds are probably WARE tokens). Accessing the developer profile page while authenticated as Arnaud Lacours showed their information; including a phone number:
(514) 448-1493. When this number was originally called, it led to a voicemail message in French, translated to English it said:
Hi, I'm Arnaud Lacours, the CEO and founder of Philo Jeux. I'm not here at the moment. Please give me your contact details and I will call you back later. Thanks a lot, bye. Voicemail System: Sorry, this voicemail is full. Please try again later. Thank you for calling, goodbye.
On the 14th April at around 02:00 UTC, it was noted that the voicemail message changed. Again, the message was in French, roughly translating to:
I'm Arnaud's girlfriend, thanks a lot for your wishes. Unfortunately Arnaud's condition got worse and he can't call you back and for now the company is closed.
- 1 Status & W/ARE Updates
- 2 Regular Statistics Updates
- 3 Dev Kit Update #2
- 4 April 27-29th Access Grants
- 5 Dev Kit Contest Final Stage
- 6 Update on Arnaud's Condition
Status & W/ARE Updates
On April 14 at 18:37 UTC, the value of the Status command updated:
CODE -5 Monarch Repository : Data Loss Imminent Booting up Command.Center.v11 Pending approval by Monarch Rebooting...
At 19:51 UTC, players who had applied for a Developer Kit started receiving emails with further details on what kind of applications W/ARE were looking for. According to this email, the company had opened positions for five partnered studios, one of which would also receive a grand prize of $1,000 USD. The deadline for applications was April 28th.
Then, at 20:38 UTC, the Status command updated again with the following output:
CODE -5 Monarch Repository : Data Loss Imminent Booting up Command.Center.v11 Pending approval by Monarch Error- Unable to connect with repository WARNING- MEMORY DUMP FAILED! Biometric backup initiated… http://bit.ly/2ITvMcW
The link led to a recording of a female voice reading out a string of words:
Drunken - Disable - Geiger - Everyday - Hockey - Determine - Endow - Coherence - Freedom - Guitarist - Framework
These are words from a PGP Word List, also known as a Biometric Word List, as hinted at in the Status text. Each word corresponds to a hex value:
51 4B 6A 58 73 47 59 2E 67 69 66
When converted to ASCII this reads
QKjXsGY.gif, which was the filename of an animated gif on Imgur.
Regular Statistics Updates
On April 15, 2018 at 22:26 UTC, the Developer Dashboard received an update to its Weekly Statistics, specifically the Total Sessions and Total Users counter. Another update followed at 13:19 the next day, after which the numbers continued to be updated 37 times over the next two days, once every hour at the 37th minute. The final update was recorded on April 18 at 1:37, 51 hours and 11 minutes after the very first update, and 36 hours after the first update at minute 37.
Another phase of continuous updates to the Statistics overview started on April 19 at 2:37 AM, this time at 30 minute intervals.
A record of all value changes can be found here.
Dev Kit Update #2
On the 21st, at 4:17 PM UTC, all users subscribed to the W/ARE mailing list received a second Developer Kit Update.
The update mentioned that the W/ARE team was working on a new test protocol for the headset that was expected to provide a 60% boost in power to the headset. It was also said that we would learn more in a couple weeks.
The update also featured 3 submitted projects so far, which are as follows:
- DreamScape, a "user defined MMO where players can create their own worlds as they sleep", created by EdgeWare Games
- The Drowned Tower, a "post-apocalyptic exploration game set in a dream-like world", made by OceanSmoke Games.
It was found that these three projects were all player created, and have no official affiliation or information involving the Waking Titan ARG.
April 27-29th Access Grants
At 7:11 PM UTC on April 27, the Documents portion of the W/ARE extranet site, along with the Task Manager section were unlocked. This started a series of tasks. Each new task was unlocked when funds were successfully transferred out of one of the developer sub-wallets. The wallet keys were received by sending the correct solution to the current task to
2018 03 03led to a corrupted image of what was discovered to be St. Basil's Cathedral in Moscow, Russia.
There were also two other images of interest, titled
Combined together, the contents of these 2 images read the following.
1. THE MIDDLE OF THE INVERTED PENDULUM COULD FEED THE MOST LOGICAL MINDS 2. ITS SHAPE WILL LIGHT THE SPARK OF CREATIVITY (049245) 3. IMPOSING SURROUNDINGS HELP IDEAS TO BE TAKEN SERIOUSLY 4. SURROUNDED BY WATER, EXHALING SERENITY (AT THE JUNCTiON BY THE LAKE)
Another image was also found, entitled "Train ticket". It contains an image of a train and Cyrillic script that translates to "Manchurian Railway Ticket", "Moscow - Beijing" dated March 5, 2018.
The Task Manager section revealed the first "Task" given to W/ARE employees, titled "Missing Employee", and that it was in progress. There was one description of what had happened, along with two update messages.
The original description read the following.
IMPORTANT MESSAGE FROM WARE RESEARCH AND DEVELOPMENT TEAM. Attention to all developers. One of our colleagues, Mr. Zheng, has gone missing a month ago while on a R&D tour. Serious investigation inside the department has lead to nothing of interest, and we’re now asking for outside help. Please send any information concerning his potential whereabouts to [email protected]
The first and second update were as follows:
All recent and potentially relevant documents found on Mr. Zheng’s computer have been translated and forwarded to the developer extranet. Our team is currently trying to use this information to retrace his last steps. We’re hoping that our combined efforts can bring light to this affair and bring Mr.Zheng back home safely. In the hope of attaining maximum reach and visibility, the R&D department also set up a Twitter account to serve as another relay of information.
(The twitter account in mention is @Ware_RDev)
UPDATE ON R&D SEARCH. All information of interest sent to [email protected] will be rewarded with codes to our exclusive WARE wallets which can be used for special package purchases.Sending an email containing the keyword "Moscow" to [email protected] caused them to send the following reply, including a link to a map of Beijing's subway for a planned 7th conference:
The WARE Research and Development team thanks you for your interest in the WARELearn initiative. The Russian Academy of Medical Science in Moscow’s conference on Art and Dreams is the last of a series of six conferences we hope will enlighten your mind. The WARE Team will review your application and get back to you as soon as possible! Feedback from employees is fundamental in the development of the WARELearn initiative. As such, we’re asking you to give us your opinion on the ideal location for our next conference. If the location you picked is chosen by our committee, you may be given the chance to attend and meet the promoters of the event. Our team has begun to pinpoint buildings that could be of interest. Feel free to inspire yourself and contact [email protected] to let us know about your suggestion. Kind regards, The WARELearn initiative
Sending an email containing all the keywords "Moscow," "Beijing," and "049245" (from Notes on locations 1) triggered another response, this time containing the ALPHA sub-wallet key:
Dear informer, To thank you for your recent help in Mr. Zheng’s case, WARE has provided you with a code to use on our internal cryptocurrency wallets. We promise that every significant clue provided to us will be rewarded as such. Claim your reward with this code and stay alert for further updates on the situation : 4e47e152a5afaf95537c5dba73ef73d45c11fd6743ff5db9bfea3eca9282fda Please withdraw the funds so that the main wallet can be updated. Note the updating process is not immediate. Kind regards, The R&D Team
The funds were withdrawn from the cryptocoin wallet, which led to an update to the Weekly Statistics page, where sub-wallet ALPHA was now displayed as empty.
A new message in the Task Manager followed:
Most recent informations linked to the WARELearn services has confirmed our suspicions that despite boarding his train in Moscow, Mr. Zheng never arrived at Beijing and seems to have abandoned the train along the route. Any information, as small as a postal code, that you can find about the possible location locations he may have visited for an extended period - such as a hotel or hostel - would be of tremendous help.
Using a map of the Trans-Manchurian Train route and the 4 hints from the Document files, players concluded that Mr. Zheng left the train in
Gostinyy Dom Chita, 672040. Sending this information to the email address yielded another wallet key. Players were able to withdraw these funds from a cryptocurrency wallet, emptying sub-wallet BETA.
The following update was posted in the Task Manager:
Thanks to dedicated informers, the investigation on Mr. Zheng is progressing and the tasks have been updated. We’ve been able to confirm that a stop was indeed made in Chita, after attending the Moscow conference on Art and Dreams. Please send any information concerning his potential whereabouts to [email protected], in addition to the updated task number.
A journal entry and a page of notes both written by Mr. Zheng were unlocked in the Documents section, along with an update in the Task Manager:
Attention to all teams. Documentation (copies and originals) coming from a source close to the missing employee have been recovered by W/ARE. There are a lot of files to organize and our database employees are still trying to get everything in order. Any information that could help us make sense of them will be most welcome.
The image of "Notes on Moscow" contains 3 blanks and descriptions of 3 paintings. The blanks can be filled in with the subjects of the paintings. Sending these keywords, in addition to the updated task number -
a1028f, Montreal, 1.30pm. Meet me at the fountain in front of the Notre Dame Basilica. - to the email, yielded the next wallet key. Again, players withdrew the funds from the wallet, emptying sub-wallet CHARLIE.
Delta - Montreal Live DropThe Task Manager updated with an announcement of a live drop:
Deploying a team for possible package seizure. Once the location will be secured and package examined, onsite examination will be possible. WARE will not allow package to leave location. Taking pictures will be permitted. Confirmation of Location: Place d’Armes, Montreal, In front of the fountain Confirmation of Time: Between 7pm and 9pm, local time
At the drop location, players received the following note:
I came two years after the Ursuline nuns. Now set in stone, here is my legacy. G. Nadeau
Investigations led to the French nurse Jeanne Mance, who arrived in New France two years after the Ursuline nuns came to Quebec and established Montreal's first hospital in 1642, the
Hôtel-Dieu de Montréal. She is memorialized in statue at the foot of the Maisonneuve Monument. Sending this information to the email unlocked the next wallet key, and the withdrawal of the funds emptied sub-wallet DELTA.
DON'T FORGET TO MOVE NOTES ON THE MEETING TO THE CLOUDand
SECULAR VADER OF THE BIBLE.
The new Task Manager update read:
The search to find Mr. Zheng is still ongoing. New information is now connecting him to Montreal’s Hotel Dieu. Please send any information concerning his potential whereabouts to [email protected], in addition to an updated task number [t1029r]. We’ve tried to access Mr. Zheng's files in the R&D dropbox, but all access has been blocked.
It contained a link to Mr. Zheng's password-locked Dropbox. Players determined the correct password was
Gutenberg, who produced the first printed Bible.
The Dropbox contained 4 pdf files with printable hexaflexagon patterns. When folded, one of the sides on each hexaflexagon yielded a 13-digit number starting with 978. These were ISBN numbers for the following 3 books:
Nine Billion Names of God,
The Paris Architect, and
War and Peace. Using the leftover numbers from each flexagon as a book cipher of the format page, line, and word, the phrase
unknown british soldier was found. This points to the
Tomb of the Unknown Soldier, which was the keyword to obtain the wallet code for sub-wallet ECHO.
FoxtrotWhen assembled and put together, the three hexaflexagons revealed a shape resembling the river Seine in Paris in the area of the Louvre. Sending
Louvreto the email address provided the code for sub-wallet FOXTROT and revealed a new journal document.
On the journal page were 3 sentences, with certain words underlined. Ordering the words by the number of underlines and counting their position in each sentence resulted in the phone number
438-368-9126. Upon calling this number a recorded message gave a morse code that translated to
PASTEH9EBKEXGT. This led to a Pastebin document containing the following text:
From the bottom of the crypt, at the feet of the Guardian, I ascend left Pass the dignitary and follow the water Go straight to the sun with open arms and turn right Turn left when you arrive home Go straight to the hand and head of the goddess and turn left to face the keeper Follow the procession into the house of kings Ignore the light and descend to your death I am here and with me the seventh part of what you are searching for.
Golf - Paris Live Drop
A new live drop was announced to be in Paris, France:
Deploying a team for possible package seizure. Once the location is secured and package examined, onsite examination will be possible. WARE will not allow package to leave the location. Taking pictures will be permitted. Confirmation of Location: At the entrance of the Passage du Souvenir, Near the stairs, Paris Confirmation of Time: Between 1pm and 3pm, local time
At the Tomb of the Unknown Soldier, a monument in the Passage du Souvenir beneath the Arc de Triomphe de l'Étoile in Paris, players were given another hexaflexagon paper puzzle and told not to un-tape it. When aligned with the other three pieces, this revelead a location marked with an X at the Louvre.
The text from the Pastebin found in the Foxtrot stage were clues on the correct route to follow inside the Louvre. The rest of the path led players to the sarcophagus of Ramesses III, on the side of which they found a depiction of
The Book of Amduat. Sending this to the email yielded the key to sub-wallet GOLF.
The parchment in
The Book of Amduat can be found in the
British Museum London, which was the keyphrase that unlocked sub-wallet HOTEL.
Locked briefcase found in London, near the British Museum. Not yet confirmed if Mr. Zheng left it there willingly. Package currently under observation.
They were right. It's all leading here. I saw it at night. i had it in my hands. All the missing parts. For the first time, I felt like all was finally put in place. Then, I felt a powerful force, ripping it from my hands. I dropped it and all the pages flew away in the wind. I remember the morning that came after. I was standing tall, pointing at the former naval person, longing for all this knowledge that got away. I need to find its missing pieces.
former naval person is the signature Winston Churchill used in his private correspondence with President Roosevelt. The text describes standing tall pointing at him. This was deduced to be Big Ben, which faces the Churchill statue in Parliament Square, London. Sending
Big Ben to the email address provided the key to withdraw the funds from sub-wallet INDIA.
A third live drop was announced to be in London:
Deploying a team for possible package seizure. Once the location will be secured and package examined, onsite examination will be possible. WARE will not allow package to leave the location. Taking pictures will be permitted. Confirmation of Location: Statue of Winston Churchill, Parliament Square, London Confirmation of Time: Between 1pm and 3pm, local time
Juliett - London Live Drop
On April 29th at 1PM local time, players met with a W/ARE technician in London and were given a scrambled picture of the "The Thinker" sculpture by Auguste Rodin, displayed at the Detroit Institute of Arts Museum. The keyphrase
Henry Fuseli, The Nightmare, 1781, a painting found at the same museum, provided the code for sub-wallet JULIETT.
This unlocked three new postcards in the Documents section.
The locations pictured on the postcards were in Mexico, Peru, and Morocco. Each postcard mentioned two numbers and two cardinal directions, and combining these led to a string of coordinates:
33N, 43E - 30N, 69E - 22N, 79E, which were found to be in Iraq, Pakistan, and India. Connecting these six locations by lines pointed to Egypt.
The circled letters on the postcards spelled
tonw. Using these clues, players found
Deir el-Medina, an Egyptian village whose name translates to "monastery of the kings". The village's name unlocked sub-wallet KILO.
'Alights, and grinning I saw it again. Except this time, what snatched it from my hands was not a divine force but the unmistakable pull of this stippled incubus. 'Alights, and grinning He glared at me, as he ripped all the pages before my horrified eyes. I felt his weight on my chest. xxxx?
It quotes excerpts from Ermasus Darwin's poem "Botanical Garden", which is an inscription found on the "The Nightmare" painting referenced in the JULIETT phase, engraved by Thomas Burke in 1783.
Then, the next Task Manager update announced another live drop:
Briefcase found in London still locked but deemed safe by our experts. Once the location will be secured and package examined, onsite examination will be possible. WARE will not allow package to leave the location. Taking pictures will be permitted. Confirmation of Location: British Museum, London Estimated Time : Between 6pm and 8pm, local time
Lima - 2nd London Live Drop
1783, the year "The Nightmare" was engraved.
Inside the box were three paper notes:
These notes reference ancient texts about dream interpretation. One of them is the Egyptian
Ramesside dream-book, the code that unlocked sub-wallet LIMA.
CODE -5 Monarch Repository : Data Loss Imminent ReBooting Command.Center.v12
The Request Supplies section on the extranet was now accessible, revealing a "Specific Item Order Form". In addition to Arnaud Lacours' name, his employee ID
43617373696e69 was already filled in. Converted from HEX to ASCII this code translates to
Cassini. Entering the ID into the console yields the following output:
LOG RECOVERED :: ITERATION #4924A :: The asteroid field was thick, denser than any I'd seen before. The ice, the dirt, the metal fragments… my ship never stood a chance.
Another Status update followed at 5:33 PM:
CODE -5 Monarch Repository : Data Loss Imminent ReBooting Command.Center.v12 ------ Error, unable to start https://i.imgur.com/Fnixw9t.png ------ New command updated
It linked to an image with the headline
SUBJECT1 and a section named
The search for Mr. Zheng concluded with a message from the @WARE_RDev Twitter account:
Dev Kit Contest Final Stagedevkit.ware-tech.cloud. The email also mentioned No Man's Sky as one of W/ARE's partnered games.
The following six winners of the contest were announced via email on May 12th at 00:20 AM:
- Summon Studios - Terraformed and Stellar Software - Beyond the Stars
- Spectrumental Games - Supersensory
- CSD Games - Tumbleweed
- Imperium Interactive - Eden
- Game Detectives - Delve
Update on Arnaud's Condition
On the 12th of May at 8:21 PM UTC, the status command was updated:
CODE -5 Command.Center.v12 crashed ------ Global Network Scan started.... Warning: Files locked by Monarch - dreamscape.exe - soundflex.exe - inyourmind.exe - Jeu_Capture_d_Ecran.jpg
One of the files "Jeu_Capture_d_Ecran.jpg" was then found an Arnaud's site, a transcription of the image is as follows:
Dear "Tablettes de Mnémosyne" fans, A lot of you recently inquired about Arnaud's health and, as you endlessly supported him during the early development of Philojeux, we think it's fair for you to know what's going on. Arnaud has been very sick lately and his condition's decline lead to a loss of consciousness. He has been transported to urgent care at Montreal's Hotel-Dieu where his vital signs are being closely monitored. We hope you understand that the launch of "Tablettes de Mnémosyne" is indefinitely postponed. Please send all words of encouragement to Arnaud's family at [email protected]
Upon emailing the address, the following response was received:
Thank you for reaching out to the Arnaud Lacours’ Foundation. All words of encouragement will be forwarded to Mr. Lacours’ family. Géraldine Nadeau Arnaud Lacours’ Foundation Hotel Dieu Hospital Research Institute 438-368-9126
When the phone number was called, a voice mail was played. A transcription of the voice mail is as follows:
You've reached Dr. Geraldine Nadeau, head of the Arnaud Lacours Foundation. Mr. Lacours' family thanks you for your support during these terrible events, and encourages you to always be cautious and critical in the face of the unknown. As Arnaud himself would say, "history comes from memory." You're invited to use the foundation's e-mail to share your words of encouragement with the family. Thank you for calling.
"History comes from memory" was found to be a riddle referencing Clio (the "Muse" of history), the daughter of Mnemosyne (the Goddess of memory). Upon emailing the word "Clio" to the address, the following response was received:
Thank you so much for returning my message. I need every helpful hand I can get. I figured, by the efforts you’ve put into contacting me, that you’ve got a high interest in Arnaud’s case. I’ve been monitoring him since nearly a month ago and I would be lying if I told you it doesn’t keep me awake at night. His condition is nothing like I’ve ever seen. His brain activity is insanely high, but he’s completely non-responsive. Not too long after I was informed of Arnaud’s condition, I was visited by a man claiming to work for a highly advanced tech company, specializing in unconscious experiences. He has been incredibly interested in Arnaud’s case as well as in my recent studies on sleeping patterns. I gave him some information on my research into lucid dreaming methods and he went on his way. I’ve never seen him again. Since then, I’ve been focused on gathering more information about W/ARE, their technology and their processes. I’ve noticed that Arnaud advertised them on his professional website but I don’t know the depth of his involvement with them. I figured that any person interested by the correlation between W/ARE and Arnaud would find the message I left there. I’ve put the Foundation in place as a cover to not arouse suspicion. I have so many questions and Zheng’s not answering my calls. All he gave me is the list of his company’s research labs as well as one totally incomprehensible file. I need to get to know more about W/ARE. If you know this man, if you can get any opening into this company’s motives, please help me. For Arnaud’s life and potentially many others. Géraldine
One of the sentences linked to a Dropbox folder that contained two images. The meaning of the images is unknown.
One of the images, titled Zheng's Note, contained what at first appeared to be gibberish. However, when every other letter is taken the following text is revealed:
Test subjects have been called in and the device has been used on them in ways that i could never condone 7 of them lost as we speak 3 of them are dead 8 are on the verge of being unrecoverable their intentions are not what we think they are actions should be taken to shut them down exit
The letters that were not used in the message appear to be the words
Lucid Dream repeating until the end of the message.
The second image, titled WARE Labs contains data concerning six research labs owned by WARE across the world. The transcription of the data is as follows:
0: Boston Research Lab Lab Director: Richard Wilkes Project name: we-2-3 / tm-1-lt / tr-10-ae Project description: 0000100001 Project code: # 4-3 Lab sequence 10-3 1: Sacremento Research Lab Lab Director: Helga Johnson Project name: st-1-dn / ss-4-bn Project description: 0001010000 Project code: # 1-2 Lab sequence: 4-6 2: Seoul Research Lab Lab Director: Yu Hyo Project name: ue-2-is / as-6-be Project description: 0100000011 Project code: # 1-2-1 Lab sequence: 9-1-13 3: Beijing Research Lab Lab Director: Wang Jie Project name: st-1-dn / bg-1-tr Project description: 0001000000 Project code: # 4 Lab sequence: 8 4: Prague Research Lab Lab Director: Adriana Dvorak Project name: ae-4-sd / of-5-ue Project description: 0100101000 Lab code: # 10-3-4 Lab sequence: 2-5-12 5: Berlin Research Lab Lab Director: Georg Muller Project name: dd-1-ae / dn-2-() Project description: 001000001 Lab code: # 2-3 Lab sequence: 7-11
Each of the letter pairs in the project name field represented a first and last letter of a word in the decoded Zheng's note.
() represent the word
three and the end of the message, respectively. Then the sequence that fit those words needed to be found, so for example,
dd-1-ae would be the words
dead 8 are in Zheng's note. Using this method, the following sequences were found:
we speak 3 / them are lost / their intentions are shut them down / subjects have been unrecoverable their intentions / actions should be shut them down / being unrecoverable their are actions should / of being unrecoverable dead 8 are / down exit
The middle number was then found to represent which letter of the middle word was important, as it was always less than the character count of the middle word. Taking each letter indicated by the middle number the string
paste hdtuig8x was given, which was found to represent a pastebin link. The pastebin link then led to another dropbox folder titled "Client - 43617373696e69" that contained 4 PDF files. The rest was solved, and a second pastebin found by splitting Zheng's note into 6 rows of 10 words like so:
Test subjects have been called in and the device has been used on them in ways that I could never condone 7 of them are lost as we speak 3 of them are dead 8 are on the verge of being unrecoverable their intentions are not what we think they are actions should be taken to shut them down exit
From there, the binary values in
Project description were used to pick out words:
0000100001 - called has 0001010000 - them ways 0100000011 - 7 speak 3 0001000000 - dead 0100101000 - unrecoverable are what 001000001 - should exit
Project code was used to pick out letters from each word:
called has | 4-3 = ls them ways | 1-2 = ta 7 speak 3 | 1-2-1 = 7p3 dead | 4 = d unrecoverable are what | 10-3-4 = aet should exit | 2-3 = hi
Lab sequence was then used to determine the order of the letters:
ls = 10-3 - l and s are letters ten and three respectively ta = 4-6 - t and a are letters four and six respectively 7p3 = 9-1-13 - 7, p and 3 are letters nine, one and thirteen respectively d = 8 - d is the eighth letter aet = 2-5-12 - a, e and t are letters two, five and twelve respectively hi = 7-11 - h and i are letters seven and eleven respectively
Reordered the following string was obtained:
This was the link to a second pastebin. The pastebin linked to a second dropbox titled "Archives". The folder contains six images of what appear to be WARE customer support logs.