User:AndrewNeo/Analyzing ApertureScience.com: Difference between revisions

From Valve Developer Community
Jump to navigation Jump to search
m (Next level)
(Work in progress)
Line 1: Line 1:
I am beginning to analyze [ApertureScience.com] by means of extreme sneakiness.
I am beginning to analyze [http://www.apertureScience.com ApertureScience.com] by means of extreme sneakiness. Due to the length, questions and answers will not be displayed on this page. Play with it if you want to find out!


== Site Ownership ==
== Site Ownership ==
The site's reverse DNS is unknown.valvesoftware.com, same as steampowered.com. It's obviously owned by Valve.
The site's reverse DNS is unknown.valvesoftware.com, same as steampowered.com. It's obviously owned by Valve. Look on the [[{{NAMESPACE}}_talk:{{PAGENAME}}|Talk page]] for the WHOIS, which I didn't grab because it wasn't really nessicary.


== ApertureScience16.swf ==
== ApertureScience16.swf ==
I have extracted the SWF file's ActionScript and analyzed it. Results to come.
I have extracted the SWF file's ActionScript and analyzed it. There are three input stages, as follows:
 
=== Stage One ===
You are presented with a blank terminal prompt. You can do two things: <code>LOGIN</code>/<code>LOGON</code>/<code>USER</code>, which lets you log in, or you can type <code>?</code>/<code>HELP</code> which will display a useless 'help' menu.<br />
If you choose to log in, you can type any username that is greater than two characters, and use the password <code>PORTAL</code> or <code>PORTALS</code>.  Then you'll move on to stage two.
 
=== Stage Two ===
You are presented with a version string and yet another prompt, <code>GlaDOS v1.07 (c) 1982 Aperture Science, Inc.</code><br />
Here you can enter several things, with different results:<br />
{|
| ''Command''
| ''Result''
|-
| <code>THECAKEISALIE</code>
| This is important! See the [[#They Lied About the Cake|They Lied About the Cake]] section.
|-
| <code>DIR</code>/<code>CATALOG</code>/<code>DIRECTORY</code>/<code>LIST</code>/<code>LS</code>/<code>CAT</code>
| Lists the <code>APPLY</code> command.
|-
| <code>IP</code>
| Reveals your UID(+L) code. See the [[#UID]] section for more information.
|-
| <code>HELP</code>/<code>LIB</code>
| Lists the commands in this list.
|-
| <code>LOGOUT</code>/<code>BYE</code>/<code>LOGOFF</code>/<code>VALVE</code>
| Plays a sound and sends you to your homepage if you have one, or SteamPowered.com if you don't.
|-
| <code>APPEND</code>/<code>ATTRIB</code>/<code>COPY</code>/<code>FORMAT</code>/<code>ERASE</code>/<code>RENAME</code>
| Gives you an error about the disk being write protected.
|-
| <code>INTERROGATE</code>
| Gives an error if no parameter is provided, otherwise gives an error about 'illegally initiating diciplinary action'.
|-
| <code>TAPEDISK</code>
| Gives an error about the user not being authorized to transfer system tapes.
|-
| <code>APPLY</code>/<code>APPLY.EXE</code>
| Begins the registration process, and Stage Three.
|-
| Anything else
| Gives an error about the file not being found.
|}
 
Oddly enough, even though these commands emulate a DOS prompt, there is an <code>LS</code> command, which is from UNIX. Ironically, the actual webserver (this very server, to be exact) is running Debian.
 
== They Lied About the Cake ==
They lied. Trust me!
 
== UID ==
Your UID is generated by the [[#gdxt.php]] script by giving it a unique variable that Flash provides.


== gdxt.php ==
== gdxt.php ==
I have poked at this script's interaction with the flash file. It doesn't seem to do a whole lot other than provide you with your UID and reply with an okay to your questions.. but it may be storing that information in a database for all we know.
I have poked at this script's interaction with the flash file. It doesn't seem to do a whole lot other than provide you with your UID and reply with an okay to your questions.. but it may be storing that information in a database for all we know.
== Results ==
At this point in time, the site only reveals a couple things. Namely, it appears that you'll be stuck in the testing center without help, but we already knew that from the trailer. Also, it appears the main character won't talk, big suprise.


== Log ==
== Log ==
9/08/06: Extracted the flash file's AS and looked at it.
9/05/06: Extracted the flash file's AS and looked at it.
9/09/06: Begun this page. More to come soon.
9/06/06: Begun this page. More to come soon.

Revision as of 14:30, 6 September 2006

I am beginning to analyze ApertureScience.com by means of extreme sneakiness. Due to the length, questions and answers will not be displayed on this page. Play with it if you want to find out!

Site Ownership

The site's reverse DNS is unknown.valvesoftware.com, same as steampowered.com. It's obviously owned by Valve. Look on the Talk page for the WHOIS, which I didn't grab because it wasn't really nessicary.

ApertureScience16.swf

I have extracted the SWF file's ActionScript and analyzed it. There are three input stages, as follows:

Stage One

You are presented with a blank terminal prompt. You can do two things: LOGIN/LOGON/USER, which lets you log in, or you can type ?/HELP which will display a useless 'help' menu.
If you choose to log in, you can type any username that is greater than two characters, and use the password PORTAL or PORTALS. Then you'll move on to stage two.

Stage Two

You are presented with a version string and yet another prompt, GlaDOS v1.07 (c) 1982 Aperture Science, Inc.
Here you can enter several things, with different results:

Command Result
THECAKEISALIE This is important! See the They Lied About the Cake section.
DIR/CATALOG/DIRECTORY/LIST/LS/CAT Lists the APPLY command.
IP Reveals your UID(+L) code. See the #UID section for more information.
HELP/LIB Lists the commands in this list.
LOGOUT/BYE/LOGOFF/VALVE Plays a sound and sends you to your homepage if you have one, or SteamPowered.com if you don't.
APPEND/ATTRIB/COPY/FORMAT/ERASE/RENAME Gives you an error about the disk being write protected.
INTERROGATE Gives an error if no parameter is provided, otherwise gives an error about 'illegally initiating diciplinary action'.
TAPEDISK Gives an error about the user not being authorized to transfer system tapes.
APPLY/APPLY.EXE Begins the registration process, and Stage Three.
Anything else Gives an error about the file not being found.

Oddly enough, even though these commands emulate a DOS prompt, there is an LS command, which is from UNIX. Ironically, the actual webserver (this very server, to be exact) is running Debian.

They Lied About the Cake

They lied. Trust me!

UID

Your UID is generated by the #gdxt.php script by giving it a unique variable that Flash provides.

gdxt.php

I have poked at this script's interaction with the flash file. It doesn't seem to do a whole lot other than provide you with your UID and reply with an okay to your questions.. but it may be storing that information in a database for all we know.

Results

At this point in time, the site only reveals a couple things. Namely, it appears that you'll be stuck in the testing center without help, but we already knew that from the trailer. Also, it appears the main character won't talk, big suprise.

Log

9/05/06: Extracted the flash file's AS and looked at it. 9/06/06: Begun this page. More to come soon.